EIP-2026-104326
PRE-CVEManageEngine OPutils 8.0 - Multiple Vulnerabilities
Title source: legacyExploitation Summary
EIP tracks 1 public exploit for EIP-2026-104326. PoCs published by Kaustubh G. Padwad.
AI-analyzed exploit summary This exploit demonstrates a privilege escalation vulnerability in ManageEngine OpUtils 8.0, allowing a normal user to escalate to administrator by modifying user details via an API call. It also includes details on missing function-level access control and CSRF/XSS vulnerabilities.
Description
ManageEngine OPutils 8.0 - Multiple Vulnerabilities
Exploits (1)
This exploit demonstrates a privilege escalation vulnerability in ManageEngine OpUtils 8.0, allowing a normal user to escalate to administrator by modifying user details via an API call. It also includes details on missing function-level access control and CSRF/XSS vulnerabilities.