CVE Catalog
CVE-2026-16053
HighCVSS 8.5Exploitation Probability (EPSS)
Elevated risk0.99%
59th percentile - higher than 59% of all known CVEs
Summary
Zohocorp ManageEngine M365 Manager Plus and M365 Security Plus versions below 4820 are affected by an Authenticated Path Traversal vulnerability in the Exchange Online backup module.
Risk Assessment
Risk of unauthorized access to files and directories outside the intended scope, potentially leading to data leakage or system integrity compromise.
Recommendation
Upgrade to version 4820 or later and restrict access to the backup module to trusted administrators.
Original NVD description (English source)
Zohocorp ManageEngine M365 Manager Plus and M365 Security Plus versions below 4820 are affected to Authenticated Path Traversal vulnerability in Exchange Online backup module.