Vulnerability · Published Aug 11, 2026 · Assigned by Zohocorp
CVE-2026-16053Path Traversal
High 8.5
In plain English
A high-severity security flaw in ManageEngine M365 Manager Plus from Zohocorp. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.8% (higher than 78% of all known vulnerabilities).
Severity (CVSS 3.1)8.5High
Exploit odds (30 days)1.8%top 21.8% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
Zohocorp ManageEngine M365 Manager Plus and M365 Security Plus versions below 4820 are affected to Authenticated Path Traversal vulnerability in Exchange Online backup module.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Zohocorp | ManageEngine M365 Manager Plus | 0 – before 4820 |
| Zohocorp | ManageEngine M365 Security Plus | 0 – before 4820 |
Weakness: CWE-23 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:H