Is CVE-2026-16900 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-16900?

CVE-2026-16900 has a CVSS v3 severity of HIGH (7.5).

Back

CVE-2026-16900

Description

Zohocorp ManageEngine Log360 and EventLog Analyzer versions 13071 and below are vulnerable to an authentication bypass in local collector registration, allowing unauthenticated actor to register a local collector by sending a specially crafted registration request.