Is CVE-2026-86708 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-86708?

CVE-2026-86708 has a CVSS v3 severity of CRITICAL (10).

Back

CVE-2026-86708

Description

ZohoCorp ManageEngine Applications Manager versions 182200 and below were vulnerable to exposure of a Google Cloud service-account private key in the Applications Manager installer, which could allow an unauthenticated attacker to impersonate the service account and access or modify associated cloud resources.