# CVE-\<phone_number_or_numberic_id_or_random_id_1\>

Unauthorized deletion of monitored services outside a low-privileged user’s assigned scope.

| Vulnerability Details |  |
|---|---|
| Severity | **High** |
| CVE ID | CVE-\<phone_number_or_numberic_id_or_random_id_1\> |
| Affected software versions | Version 182000 and below |
| Fixed Version | Version 182100 and above<br>Version 181104 to 181109<br>Version 182001 to 182009 |
| Fixed On | 26 August 2026 |

## Details

A permissions validation issue in Applications Manager allowed a low-privileged user to delete a service monitor outside the user’s assigned scope.

## Impact

An authenticated operator or delegated administrator could delete service monitors they were not authorized to manage, disrupting monitoring coverage, preventing future alerts, and potentially removing related service history and records.

## Fix

Applications Manager version 182100 (refer above for other fixed versions) and above fixes this issue by enforcing proper validation of Service IDs.

## Steps to update

Update your Applications Manager instance to the latest build using the service pack.

## Source and Acknowledgements

Find out more about CVE-\<phone_number_or_numberic_id_or_random_id_1\> from [CVE Directory](https://www.cve.org/CVERecord?id=CVE-%3Cphone_number_or_numberic_id_or_random_id_1%3E) and [NIST NVD](https://nvd.nist.gov/vuln/detail/CVE-%3Cphone_number_or_numberic_id_or_random_id_1%3E)

## Reported by:

sealldev

### Need Help?

For clarification or corrections please contact our [support team](https://www.manageengine.com/products/applications_manager/support.html) or email us at [appmanager-support@manageengine.com](mailto:appmanager-support@manageengine.com)