CVE-2026-77800
High
Description
ManageEngine Key Manager Plus versions before 7151 are vulnerable to a SAML authentication bypass that allows attackers to log in using SAML assertions meant for another service provider.
SeverityHigh
CVSS7.7
Exploit probability—
ProductManageEngine Key Manager Plus
PublishedNov 3, 2026
First seenNov 4, 2026
Weakness typeCWE-304CWE-304
How to fix
Update
- Zohocorp ManageEngine Key Manager Plus7151 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Zohocorp ManageEngine Key Manager Plus | v < 7151 | 7151 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.