Related Products

CVE-2026-12263: Authentication Bypass Vulnerability in EventLog Analyzer and Log360

Vulnerability details
Severity	High
CVE ID	CVE-2026-12263
Affected software versions	Builds from 13001 to 13070
Fixed version	Build 13071
Fixed on	August 25, 2026

Details

CVE-2026-12263 is an Authentication Bypass vulnerability in EventLog Analyzer and Log360. The vulnerability has been addressed, and the issue does not exist in the fixed version.

Impact

This vulnerability allows any authenticated user to log in to EventLog Analyzer or Log360 as any other user, resulting in unauthorized access.

Steps to update

Update your Log360 or EventLog Analyzer installation to build 13071 or later using the following links

EventLog Analyzer: https://www.manageengine.com/products/eventlog/service-packs.html
Log360: https://www.manageengine.com/log-management/service-packs.html

Acknowledgements

This issue was identified by 0xManhNV through the Zoho Bug Bounty Program.

Please contact our product support or our security team if you need further assistance.

EventLog Analyzer Trusted By

Customer Speaks

Credit Union of Denver has been using EventLog Analyzer for more than four years for our internal user activity monitoring. EventLog Analyzer provides great value as a network forensic tool and for regulatory due diligence. This product can rapidly be scaled to meet our dynamic business needs.

Benjamin Shumaker

Vice President of IT / ISO

Credit Union of Denver
The best thing, I like about the application, is the well structured GUI and the automated reports. This is a great help for network engineers to monitor all the devices in a single dashboard. The canned reports are a clever piece of work.

Joseph Graziano, MCSE CCA VCP

Senior Network Engineer

Citadel
EventLog Analyzer has been a good event log reporting and alerting solution for our information technology needs. It minimizes the amount of time we spent on filtering through event logs and provides almost near real-time notification of administratively defined alerts.

Joseph E. Veretto

Operations Review Specialist
Office of Information System

Florida Department of Transportation
Windows Event logs and device Syslogs are a real time synopsis of what is happening on a computer or network. EventLog Analyzer is an economical, functional and easy-to-utilize tool that allows me to know what is going on in the network by pushing alerts and reports, both in real time and scheduled. It is a premium software Intrusion Detection System application.

Jim Lloyd

Information Systems Manager

First Mountain Bank

Testimonials Case Studies

Security Advisory