CVE-2026-86708
CRITICAL
NVD
CVSS Score
10
Severity
CRITICAL
Published
Sep 23, 2026
Vendor
unknown
Description
ZohoCorp ManageEngine Applications Manager versions 182200 and below were vulnerable to exposure of a Google Cloud service-account private key in the Applications Manager installer, which could allow an unauthenticated attacker to impersonate the service account and access or modify associated cloud resources.