CVE-2026-77799

Two-factor authentication bypass

HIGH 7.4

CVSS 3.1Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:NPublished: 2026-11-03 04:57 UTCUpdated: 2026-11-03 04:57 UTCAssigner: Zohocorp

Description

ManageEngine Key Manager Plus versions before 7150 are vulnerable to a Two-Factor Authentication bypass that allows attackers with valid credentials to log in without a verification code.

CWE

CWE-288

Affected

Zohocorp ManageEngine Key Manager Plus

View on CVE.org