CVE-2023-26601: Zohocorp ManageEngine Assetexplorer

High severity, CVSS 7.5. EPSS: 34.1% chance of exploitation in the next 30 days.

Zoho ManageEngine ServiceDesk Plus through 14104, Asset Explorer through 6987, ServiceDesk Plus MSP before 14000, and Support Center Plus before 14000 allow Denial-of-Service (DoS).

Affected products

• Zohocorp ManageEngine Assetexplorer: before 6.9 (fixed in 6.9); version 6.9 only
• Zohocorp ManageEngine ServiceDesk Plus: before 14.1 (fixed in 14.1); version 14.1 only
• Zohocorp ManageEngine ServiceDesk Plus Msp: before 14.0 (fixed in 14.0); version 14.0 only
• Zohocorp ManageEngine SupportCenter Plus: before 14.0 (fixed in 14.0); version 14.0 only

Published 2023-03-06. Last modified 2026-06-17.