Threat Investigation
Request a demo

CVE-2026-16053

High

Description

Zohocorp ManageEngine M365 Manager Plus and M365 Security Plus versions below 4820 are affected to Authenticated Path Traversal vulnerability in Exchange Online backup module.

SeverityHigh
CVSS8.5
Exploit probability—
ProductManageEngine M365 Manager Plus
PublishedAug 11, 2026
First seenAug 11, 2026
Weakness typeCWE-23CWE-23

How to fix

Update
  • Zohocorp ManageEngine M365 Manager Plus4820 or later
  • Zohocorp ManageEngine M365 Security Plus4820 or later

Affected products

ProductAffected versionsFixed in
Zohocorp ManageEngine M365 Manager Plusv < 48204820
Zohocorp ManageEngine M365 Security Plusv < 48204820

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.