CVE-2022-26777: Zohocorp ManageEngine Remote Access Plus

Medium severity, CVSS 5.3. EPSS: 2.1% chance of exploitation in the next 30 days.

Zoho ManageEngine Remote Access Plus before 10.1.2137.15 allows guest users to view license details.

Affected products

  • Zohocorp ManageEngine Remote Access Plus: before 10.1.2137.15 (fixed in 10.1.2137.15)

Published 2022-04-16. Last modified 2026-06-17.