CVE-2022-26653

PoC —

CVSS 3.1

5.3 medium

EPSS

2%p81

Published

Apr 16, 2022 (Apr 16, 2022)

Modified

Jun 17, 2026

Description

Zoho ManageEngine Remote Access Plus before 10.1.2137.15 allows guest users to view domain details (such as the username and GUID of an administrator).

Vendors: zohocorp
Products: manageengine remote access plus
Weakness: CWE-425
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (2.1%)

In the news0 stories

No ingested article mentions this CVE yet.