CVE-2026-16900
Last modified
CVE-2026-16900 is a high-severity vulnerability rated 7.5/10 on the CVSS scale. Zohocorp ManageEngine Log360 and EventLog Analyzer versions 13071 and below are vulnerable to an authentication bypass in local collector registration, allowing unauthenticated actor to register a local collector by sending a specially crafted registration request.. EPSS estimates a 1.54% chance of exploitation in the next 30 days.
Description
Zohocorp ManageEngine Log360 and EventLog Analyzer versions 13071 and below are vulnerable to an authentication bypass in local collector registration, allowing unauthenticated actor to register a local collector by sending a specially crafted registration request.
Metrics
Weakness Enumeration
Affected Software
Source: CNA advisory (CVE.org). NVD analysis pending.
| Vendor | Product | Versions |
|---|---|---|
| Zohocorp | Log360 | < 13071 |
| Zohocorp | EventLog Analyzer | < 13071 |
References
Timeline
- Published
- Last Modified
- Status
- Awaiting Analysis
Frequently Asked Questions
What is CVE-2026-16900?
How severe is CVE-2026-16900?
How do I fix CVE-2026-16900?
How Strix Helps
- Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-16894IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a …9.8
- CVE-2026-16895A logic vulnerability (fail-open condition) has been identif…5.1
- CVE-2026-16896IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local authenticat…4.7
- CVE-2026-16897IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a …4.4
- CVE-2026-16898IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local authenticat…7.8
- CVE-2026-1690A flaw has been found in Tenda HG10 US_HG7_HG9_HG10re_300001…4.7
- CVE-2026-16901IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a …8.8
- CVE-2026-16903IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a …9.6
- CVE-2026-16904IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authentica…8.1
- CVE-2026-16905IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote …6.5
- CVE-2026-16906IBM i 7.6, and 7.5 could allow a remote authenticated attack…8.8
- CVE-2026-16907IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authentica…7.6
Are you affected by CVE-2026-16900?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST