{"id":"EM-20261112-IKZ2","url":"https://cyber.eventmonitor.net/incident/EM-20261112-IKZ2/critical-zohocorp-manageengine-m365-manager-plus-vulnerability-cve-2026-12591/","type":"cve","title":"Critical Zohocorp ManageEngine M365 Manager Plus Vulnerability (CVE-2026-12591)","subtitle":"CVE-2026-12591","subject":"CVE-2026-12591","status":"Developing","severity":"critical","affected":[],"headline":null,"born":"2026-11-12T09:32:50.000Z","firstSignal":"2026-11-12T07:16:47.260Z","lastSignal":"2026-11-12T09:32:50.000Z","updated":"2026-11-12T10:08:44.750Z","revision":1,"life":[{"status":"Born","at":"2026-11-12T09:32:50.000Z","why":"second independent source: C29 CIRCL Vulnerability-Lookup"},{"status":"Developing","at":"2026-11-12T09:32:50.000Z","why":"signals keep joining"}],"changeLog":[{"at":"2026-11-12T07:16:47.260Z","what":"First signal: C6 NVD CVE API 2.0"},{"at":"2026-11-12T09:32:50.000Z","what":"Born: second source, C29 CIRCL Vulnerability-Lookup. Page EM-20261112-IKZ2 created."}],"stages":[{"name":"Disclosed","at":"2026-11-12T07:16:47.260Z","detail":"C6 NVD published"},{"name":"Scored","at":"2026-11-12T07:16:47.260Z","detail":"CVSS 9.9"},{"name":"Exploited","at":null,"detail":"No exploitation reported"},{"name":"Advisories","at":null,"detail":"None yet"},{"name":"Vendor Response","at":null,"detail":"None in sources yet"},{"name":"Resolved","at":null,"detail":"After 14 quiet days"}],"signals":[{"at":"2026-11-12T07:16:47.260Z","source":"C6","sourceName":"NVD CVE API 2.0","role":"Database","severity":4,"title":"CVE-2026-12591 (CVSS 9.9)","text":"Zohocorp ManageEngine M365 Manager Plus versions below 4818 is affected by an authenticated technician may exploit insufficient permission validation in the delegated administration interface to escalate privileges beyond their intended scope, which could result in remote code execution during administrative processing.","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-12591"},{"at":"2026-11-12T09:32:50.000Z","source":"C29","sourceName":"CIRCL Vulnerability-Lookup","role":"Database","severity":2,"title":"GHSA-v53h-q7r3-wr4w / CVE-2026-12591","text":"Zohocorp ManageEngine M365 Manager Plus versions below 4818 is affected by an authenticated technician may exploit insufficient permission validation in the delegated administration interface to escalate privileges beyond their intended scope, which could result in remote code execution during…","url":"https://vulnerability.circl.lu/vuln/GHSA-v53h-q7r3-wr4w"}],"crowd":[],"reference":{"nvd":{"published":"2026-11-12T07:16:47.260","score":9.9,"severity":"CRITICAL","desc":"Zohocorp ManageEngine M365 Manager Plus versions below 4818 is affected by an authenticated technician may exploit insufficient permission validation in the delegated administration interface to escalate privileges beyond their intended scope, which could result in remote code execution during…","product":"","seen":1794478124750},"kev":null,"epss":null,"p0":false},"mergedInto":null,"publisher":"Event Monitor Cyber"}