CVE-2026-75825

8.8 highEPSS 2.2%

High (8.8). EPSS 2.2% chance of exploitation in the next 30 days.

ZohoCorp ManageEngine OpManager versions 12.8.710 and below with the Application Manager Plugin enabled were vulnerable to an Authentication Bypass vulnerability.

Severity

CVSS 3.1

8.8 high

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 2.2% chance of exploitation in the next 30 days; higher than 82% of CVEs (scores of 2026-10-31)
CWE: CWE-306
Published: 2026-09-23
Modified: 2026-09-24
Record from: the NVD, synced 2026-10-19

References

https://www.manageengine.com/itom/advisory/cve-2026-75825.html

Check your stack JSON