CVE-2022-26653

MEDIUM 5.3CVE-2022-26653 · Published 16/04/2022 · updated 17/06/2026

In short

CVE-2022-26653 is a MEDIUM (CVSS 5.3) vulnerability affecting manageengine remote access plus (zohocorp).
Chance of exploitation in the next 30 days (EPSS): 2.1%, higher than 81.9% of all vulnerabilities.
Fix: update to 10.1.2137.15 or later.

Package	Affected versions	Patched versions
manageengine remote access plus zohocorp	`< 10.1.2137.15`	`10.1.2137.15`

Description

Zoho ManageEngine Remote Access Plus before 10.1.2137.15 allows guest users to view domain details (such as the username and GUID of an administrator).

References

raxis.com/blog/cve-2022-26653-and-cve-2022-26777 · Exploit
manageengine.com/remote-desktop-management/advisory/cve-2022-26653.html · Vendor Advisory

More vulnerabilities in manageengine remote access plus

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

manageengine remote access plus

zohocorp

< 10.1.2137.15

10.1.2137.15

More vulnerabilities in manageengine remote access plus

See all →