- Products & ServicesProducts & Services
- SolutionsSolutions
- PricingPricing
- CompanyCompany
- ResourcesResources
en
en
A short verification protects source data and prevents automated AI requests.
Verifying...
As of 11/07/2026, ManageEngine Applications Manager recorded 6 security vulnerabilities in the last 90 days, of which 6 are rated High or Critical. None of these vulnerabilities is actively exploited (KEV) according to CISA's catalog. CyStack recommends that organizations and individual users apply patches as soon as possible.
CyStack does not yet have sufficient official-source data to identify the latest version of ManageEngine Applications Manager and determine which vulnerabilities affect that version.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
CVE-2026-86708Sensitive data exposureCVE-2026-86683Broken Authentication VulnerabilityCVE-2026-86681Broken Access Control vulnerabilityCVE-2026-86679Broken Access Control vulnerabilityCVE-2026-86678Broken Authentication vulnerability| Vulnerability | Exploitation status | Fix | Published | Severity |
|---|---|---|---|---|
CVE-2026-86708Sensitive data exposure | Exploitation statusNot exploited | FixYes | Published09/23/2026 | SeverityCritical |
CVE-2026-86683Broken Authentication Vulnerability | Exploitation statusNot exploited | FixYes | Published09/23/2026 | SeverityHigh |
CVE-2026-86681Broken Access Control vulnerability | Exploitation statusNot exploited | FixYes | Published09/23/2026 | SeverityHigh |
CVE-2026-86679Broken Access Control vulnerability | Exploitation statusNot exploited | FixYes | Published09/23/2026 | SeverityHigh |
CVE-2026-86678Broken Authentication vulnerability | Exploitation statusNot exploited | FixYes | Published09/23/2026 | SeverityHigh |
CVE-2026-86677Broken Authentication vulnerability | Exploitation statusNot exploited | FixYes | Published09/23/2026 | SeverityHigh |
CVE-2025-9787Stored XSS | Exploitation statusNot exploited | FixYes | Published12/18/2025 | SeverityMedium |
CVE-2025-9223Command Injection | Exploitation statusNot exploited | FixYes | Published11/11/2025 | SeverityHigh |
CVE-2025-6239Information disclosure | Exploitation statusNot exploited | FixYes | Published10/21/2025 | SeverityMedium |
9 Results | Page 1 of 1