Critical Vulnerability in ZohoCorp ManageEngine Applications Manager Exposes Google Cloud Service-Account Private Key
A critical vulnerability (CVE-2026-86708) with a CVSS score of 10 has been discovered in ZohoCorp ManageEngine Applications Manager versions 182200 and below. This vulnerability exposes a Google Cloud service-account private key, allowing an unauthenticated attacker to impersonate the service account and access or modify associated cloud resources. Affected organizations should update to version 182300 or later immediately.