CVE-2026-3324 HIGH

CVE-2026-3324: Authentication Bypass

Vendor Zohocorp

Product ManageEngine Log360

Weakness CWE-288

Published April 16, 2026

Last update April 16, 2026

View on NVD All CVEs

CVSS base score

8.2/10

Attack vector Network

Attack complexity Low

Privileges required None

User interaction None

Confidentiality High

Integrity Low

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N

What the vulnerability does

01Description

Zohocorp ManageEngine Log360 versions 13000 through 13013 are vulnerable to authentication bypass on certain actions due to improper filter configuration.

Key dates

02Disclosure timeline

April 16, 2026 CVE published

April 16, 2026 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2026-3324 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/288.html

Related vulnerabilities

CVE-2026-3324: Authentication Bypass

01Description

02Disclosure timeline

03References

04Related CVE