{"vulnerability": "cve-2026-92905", "sightings": [{"uuid": "57e599d7-b84e-4142-80f9-c7fff37a1935", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-92905", "type": "seen", "source": "https://gist.github.com/alon710/ace3059648afffb1ee9f4d1ec9f04119", "content": "# CVE-2026-92905: CVE-2026-92905: Denial of Service in Zoho ManageEngine EventLog Analyzer and Log360 Log Collector\n\n> **CVSS Score:** 5.3\n> **Published:** 2026-09-24\n> **Full Report:** https://cvereports.com/reports/CVE-2026-92905\n\n## Summary\nZohoCorp ManageEngine EventLog Analyzer and Log360 before build 13071 were vulnerable to a denial-of-service (DoS) vulnerability that allowed unauthenticated remote attackers to crash the log collector service using malformed syslog packets.\n\n## TL;DR\nUnauthenticated remote attackers can crash the ManageEngine log collector service by sending crafted, malformed syslog datagrams to the syslog listener port.\n\n## Technical Details\n\n- **CWE ID**: CWE-248 (Uncaught Exception)\n- **Attack Vector**: Network\n- **CVSS v3.1 Score**: 5.3 (Medium)\n- **Impact**: Denial of Service (Availability)\n- **Exploit Status**: No public PoC\n- **KEV Status**: Not Listed\n\n## Affected Systems\n\n- Zoho ManageEngine EventLog Analyzer\n- Zoho ManageEngine Log360\n- **ManageEngine EventLog Analyzer**: < Build 13071 (Fixed in: `Build 13071`)\n- **ManageEngine Log360**: < Build 13071 (Fixed in: `Build 13071`)\n\n## Mitigation\n\n- Upgrade to Build 13071 or later\n- Network Segmentation & ACLs\n- Configure automated service recovery\n\n**Remediation Steps:**\n1. Identify all deployed EventLog Analyzer and Log360 instances.\n2. Check the current build number. If it is 13070 or earlier, plan an upgrade.\n3. Download the Service Pack 13071 from the official ManageEngine site.\n4. Apply the patch during a scheduled maintenance window.\n5. Restrict inbound access to UDP/TCP port 514 via firewall rules to known log sources.\n\n## References\n\n- [https://www.manageengine.com/log-management/advisory/CVE-2026-92905.html](https://www.manageengine.com/log-management/advisory/CVE-2026-92905.html)\n- [https://nvd.nist.gov/vuln/detail/CVE-2026-92905](https://nvd.nist.gov/vuln/detail/CVE-2026-92905)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-92905) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-09-29T07:30:30.000000Z"}]}