← Database

CVE-2026-77799

HIGH CVSS: 7.4 Published: 2026-11-03 Modified: 2026-11-03

Description

ManageEngine Key Manager Plus versions before 7150 are vulnerable to a Two-Factor Authentication bypass that allows attackers with valid credentials to log in without a verification code.

Affected Platforms

Unknown

Weakness Type

CWE-288

References