ManageEngine Log360!

ManageEngineのKey Manager Plus、Log360、EventLog Analyzer、Password Manager Pro、PAM360に計11件の脆弱性。CVSS 9.1のアクセス制御不備やRCE、SAML・2FA認証回避、秘密鍵取得の危険性と修正ビルドを公式情報から解説

TL;DR Zoho released urgent patches to fix 11 bugs across ManageEngine Key Manager Plus, Log360, EventLog Analyzer, and PAM360. The flaws include one critical access bypass (CVE-2026-13594) and ten high-risk bugs for remote code execution. Network admins must update their servers right away to block potential attacks. Why It Matters ManageEngine Key Manager Plus, PAM360, and Log360 store SSH keys, SSL certs, root passwords, and audit logs.

Versions of ManageEngine Log360 and EventLog Analyzer up to 13062 may let a malicious person skip the normal login process and view or change data they.

Zoho Corporation's ManageEngine Log360 and EventLog Analyzer versions 13062 and below are vulnerable to an issue that could allow an adversary to gain unauthorized access to the product.

Zohocorp ManageEngine Eventlog Analyzer and ManageEngine Log360 versions before 13062 are vulnerable to Authenticated Remote Code Execution in Log Forward option.

Recommendations for SMB SIEM. Currently using ME Event Log Analyzer (LOG360). It's pretty good for the money certainly. However, looking for a more 'mainstream' provider. Thanks!

ManageEngine unveiled that its security information and event management (SIEM) solution, Log360, has been strengthened with a reengineered threat detection approach, in a major enhancement aimed at addressing the needs of security operations center (SOC) teams. Over 60% of SOC teams are overwhelmed with irrelevant threat data, of which a majority (53%) of cloud security alerts can be considered noise, according to the 2025 Threat Intelligence Benchmark study commissioned by Google. ManageEngine’s latest release bolsters …

Zohocorp ManageEngine Log360 versions 13000 through 13013 are vulnerable to authentication bypass on certain actions due to improper filter configuration.

The author is seeking recommendations for a Security Information and Event Management (SIEM) solution tailored for small and medium-sized businesses (SMBs). Currently, they are using ME Event Log Analyzer (LOG360) and find it satisfactory for the price, but they are looking for a more 'mainstream' provider.

Built-In Orchestration and Low-Code Playbooks in Log360 Let Security Teams Handle the Full Incident Life Cycle Within One Platform

New Capabilities in Log360 Tackle False Positives, Keep Threat Coverage Current, and Enable Scaling With Enterprise Demand