CVE-2022-26653

5.3 mediumEPSS 2.1%

Medium (5.3) in zohocorp manageengine remote access plus. EPSS 2.1% chance of exploitation in the next 30 days.

Zoho ManageEngine Remote Access Plus before 10.1.2137.15 allows guest users to view domain details (such as the username and GUID of an administrator).

Severity

CVSS 3.1

5.3 medium

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

EPSS: 2.1% chance of exploitation in the next 30 days; higher than 81% of CVEs (scores of 2026-10-31)
CWE: CWE-425
Published: 2022-04-16
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

zohocorp:manageengine_remote_access_plus

References

https://raxis.com/blog/cve-2022-26653-and-cve-2022-26777
https://www.manageengine.com/remote-desktop-management/advisory/cve-2022-26653.html
https://raxis.com/blog/cve-2022-26653-and-cve-2022-26777
https://www.manageengine.com/remote-desktop-management/advisory/cve-2022-26653.html

Check your stack JSON