CVE-2026-77800

High

ManageEngine Key Manager Plus versions before 7151 are vulnerable to a SAML authentication bypass that allows attackers to log in using…

0fc0942c-577d-436f-ae8e-945763c79b02·CWE-304·Published 2026-11-03

CVSS

7.7

EPSS

—

KEV

Exploits

NVDen

187 chars

ManageEngine Key Manager Plus versions before 7151 are vulnerable to a SAML authentication bypass that allows attackers to log in using SAML assertions meant for another service provider.

CVSS metrics across sources

Version	Type	Source	Base	Exp	Impact

3.1	Secondary	NVD	7.7	2.2	5.5	CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L
3.1	Secondary	ENISA EUVD	7.7	—	—	CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L