https://vulnfeed.org/Every disclosure, as it lands. Critical-only feed available.enhttps://vulnfeed.org/cve/CVE-2026-77777/https://vulnfeed.org/cve/CVE-2026-77777/Tue, 03 Nov 2026 10:17:19 +0000ManageEngine Key Manager Plus versions before 7151 are vulnerable to an improper access control issue that allow authenticated users to modify another user's ACME certificate deployment credentials.https://vulnfeed.org/cve/CVE-2026-77691/https://vulnfeed.org/cve/CVE-2026-77691/Tue, 03 Nov 2026 10:17:18 +0000ZohoCorp ManageEngine Key Manager Plus versions before 7151 allow authenticated users to enter malicious input when configuring a Microsoft CAhttps://vulnfeed.org/cve/CVE-2026-77778/https://vulnfeed.org/cve/CVE-2026-77778/Tue, 03 Nov 2026 09:42:23 +0000ZohoCorp ManageEngine Key Manager Plus versions up to 7150 allow authenticated users to export certificates belonging to other users to their own registered key vaults.https://vulnfeed.org/cve/CVE-2026-77800/https://vulnfeed.org/cve/CVE-2026-77800/Tue, 03 Nov 2026 05:18:52 +0000ManageEngine Key Manager Plus versions before 7151 are vulnerable to a SAML authentication bypass that allows attackers to log in using SAML assertions meant for another service provider.https://vulnfeed.org/cve/CVE-2026-77799/https://vulnfeed.org/cve/CVE-2026-77799/Tue, 03 Nov 2026 04:57:12 +0000ManageEngine Key Manager Plus versions before 7150 are vulnerable to a Two-Factor Authentication bypass that allows attackers with valid credentials to log in without a verification code.