What is GHSA-v53h-q7r3-wr4w?

GHSA-v53h-q7r3-wr4w is a security advisory published by GitHub Security Advisories with Critical severity. Zohocorp ManageEngine M365 Manager Plus versions below 4818 is affected by an authenticated...

Which CVE IDs does GHSA-v53h-q7r3-wr4w cover?

GHSA-v53h-q7r3-wr4w covers the following CVE IDs: CVE-2026-12591. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-v53h-q7r3-wr4w?

GHSA-v53h-q7r3-wr4w has a CVSS v3 base score of 9.9, published by GitHub Security Advisories.

GHSA-v53h-q7r3-wr4wCriticalCVSS 9.9

Zohocorp ManageEngine M365 Manager Plus versions below 4818 is affected by an authenticated...

Vendor

GitHub Security Advisories

Published

November 12, 2026

Last Modified

November 12, 2026

🔗 CVE IDs covered (1)

CVE-2026-12591 →

📋 Description

Zohocorp ManageEngine M365 Manager Plus versions below 4818 is affected by an authenticated technician may exploit insufficient permission validation in the delegated administration interface to escalate privileges beyond their intended scope, which could result in remote code execution during administrative processing.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-12591
https://www.manageengine.com/microsoft-365-management-reporting/CVE-2026-12591.html
https://github.com/advisories/GHSA-v53h-q7r3-wr4w