Related Products

CVE-2026-13594: Improper Access Control vulnerability in Log360 and EventLog Analyzer

Vulnerability details
Severity	High
CVE ID	CVE-2026-13594
Affected software versions	Builds from 13025 to 13061
Fixed version	13062
Fixed on	July 6, 2026

Details

CVE-2026-13594 is a security vulnerability in ManageEngine Log360 and EventLog Analyzer which could allow an adversary to gain unauthorized access to the product.

Impact

Successful exploitation of this vulnerability could impact the confidentiality, integrity, and availability of the product.

Fix

The issue has been resolved by strengthening the authentication checks in the affected components.

Steps to update

Update your Log360 or EventLog Analyzer instance to build 13062 or later using the service pack.

Acknowledgements

This issue was reported by tran nghia through the Zoho BugBounty program.

If you have any questions or need assistance updating the product to the latest version, please contact product support or our security team.

EventLog Analyzer Trusted By

Customer Speaks

Credit Union of Denver has been using EventLog Analyzer for more than four years for our internal user activity monitoring. EventLog Analyzer provides great value as a network forensic tool and for regulatory due diligence. This product can rapidly be scaled to meet our dynamic business needs.

Benjamin Shumaker

Vice President of IT / ISO

Credit Union of Denver
The best thing, I like about the application, is the well structured GUI and the automated reports. This is a great help for network engineers to monitor all the devices in a single dashboard. The canned reports are a clever piece of work.

Joseph Graziano, MCSE CCA VCP

Senior Network Engineer

Citadel
EventLog Analyzer has been a good event log reporting and alerting solution for our information technology needs. It minimizes the amount of time we spent on filtering through event logs and provides almost near real-time notification of administratively defined alerts.

Joseph E. Veretto

Operations Review Specialist
Office of Information System

Florida Department of Transportation
Windows Event logs and device Syslogs are a real time synopsis of what is happening on a computer or network. EventLog Analyzer is an economical, functional and easy-to-utilize tool that allows me to know what is going on in the network by pushing alerts and reports, both in real time and scheduled. It is a premium software Intrusion Detection System application.

Jim Lloyd

Information Systems Manager

First Mountain Bank

Testimonials Case Studies

Security Advisory