Log360 vulnerabilities

2 known vulnerabilities in Log360 from Zoho. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  Log360: Improper Access Control

  CVE-2026-16900Nov 3, 2026ZohoEPSS 1.54%

  Zohocorp ManageEngine Log360 and EventLog Analyzer versions 13071 and below are vulnerable to an authentication bypass in local collector registration, allowing unauthenticated actor to register a local collector by sending a specially crafted registration req

• 9.1 Critical severity

  Log360: Improper Access Control

  CVE-2026-13594Nov 3, 2026ZohoEPSS 1.14%

  Zoho Corporation's ManageEngine Log360 and EventLog Analyzer versions 13062 and below are vulnerable to an issue that could allow an adversary to gain unauthorized access to the product.