# CVE-2026-13594

Auth bypass in ManageEngine Log360/EventLog Analyzer allows unauthorized admin access.

- Page: https://www.vulneraibility.com/cve/CVE-2026-13594
- CVSS: 9.1
- Known exploited: not in CISA KEV as of our last sync
- Weakness: CWE-284
- Published: 2026-11-03

## Affected versions

- Zohocorp EventLog Analyzer: affected < 13062
- Zohocorp Log360: affected < 13062

A version outside these ranges is not a statement that it is unaffected.

## Impact

Authentication bypass enables attackers to access admin UI, view/modify logs, change configs, and perform administrative actions.

## Action

Immediate action required

## Recommendation

Upgrade to fixed version (>13062); restrict management UI access with ACLs/VPN; apply firewall/WAF rules.

## References

- [other] https://www.manageengine.com/products/eventlog/advisory/CVE-2026-13594.html

---
Summary, impact and action are written by the vulneraibility.com AI analysis pipeline from the CVE record, NVD, CISA and FIRST data; verify against the references.