Related Products

CVE-2026-8923: Authenticated Remote Code Execution Vulnerability in Eventlog analyzer and Log360

Vulnerability details
Severity	High
CVE ID	CVE-2026-8923
Affected software versions	Builds 13060 and earlier
Fixed version	Build 13062
Fixed on	July 6, 2026

Details

CVE-2026-8923 refers to an authenticated remote code execution vulnerability in ManageEngine Log360 and Eventlog analyzer where an authenticated technician with log forwarding and log filtering modules privilege could perform arbitrary remote code Execution.

Impact

An authenticated technician could exploit insufficient validation of input parameters to inject and execute arbitrary code on the server, potentially leading to remote code execution.

Fix

The issue is fixed by adding proper processing & sanitizing of input values to prevent remote code execution.

Steps to update

Update your Log360 or EventLog Analyzer instance to build 13062 or later using the service pack.

Acknowledgements

This issue was identified by the ManageEngine Security Team through the Zoho Bug Bounty Program.

Please contact our product support or our security team if you need further assistance.

EventLog Analyzer Trusted By

Customer Speaks

Credit Union of Denver has been using EventLog Analyzer for more than four years for our internal user activity monitoring. EventLog Analyzer provides great value as a network forensic tool and for regulatory due diligence. This product can rapidly be scaled to meet our dynamic business needs.

Benjamin Shumaker

Vice President of IT / ISO

Credit Union of Denver
The best thing, I like about the application, is the well structured GUI and the automated reports. This is a great help for network engineers to monitor all the devices in a single dashboard. The canned reports are a clever piece of work.

Joseph Graziano, MCSE CCA VCP

Senior Network Engineer

Citadel
EventLog Analyzer has been a good event log reporting and alerting solution for our information technology needs. It minimizes the amount of time we spent on filtering through event logs and provides almost near real-time notification of administratively defined alerts.

Joseph E. Veretto

Operations Review Specialist
Office of Information System

Florida Department of Transportation
Windows Event logs and device Syslogs are a real time synopsis of what is happening on a computer or network. EventLog Analyzer is an economical, functional and easy-to-utilize tool that allows me to know what is going on in the network by pushing alerts and reports, both in real time and scheduled. It is a premium software Intrusion Detection System application.

Jim Lloyd

Information Systems Manager

First Mountain Bank

Testimonials Case Studies

Security Advisory