CVE-2026-3324 affects ManageEngine Log360 versions 13000 through 13013 and involves an authentication bypass vulnerability (CWE-288) caused by improper filter configuration. This misconfiguration enables attackers to circumvent authentication controls on specific actions, potentially leading to unauthorized access. The vulnerability has a CVSS 3.1 base score of 8.2, indicating high severity with network attack vector, low attack complexity, no privileges required, and no user interaction needed. Confidentiality impact is high, integrity impact is low, and availability impact is none. No patch or official remediation level has been disclosed by Zohocorp as of the published date.

Successful exploitation of this vulnerability could allow an unauthenticated attacker to bypass authentication mechanisms on certain actions within ManageEngine Log360, potentially leading to unauthorized access to sensitive information (high confidentiality impact) and limited modification capabilities (low integrity impact). There is no impact on availability. No known exploits are currently reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, organizations should monitor vendor communications closely. No vendor-provided mitigation or workaround information is currently available.