{"affected":[{"defaultStatus":"unaffected","product":"Log360","source":"CNA: Zohocorp","vendor":"Zohocorp","versions":[{"lessThan":"13071","status":"affected","version":"0","versionType":"custom"}]},{"defaultStatus":"unaffected","product":"EventLog Analyzer","source":"CNA: Zohocorp","vendor":"Zohocorp","versions":[{"lessThan":"13071","status":"affected","version":"0","versionType":"custom"}]}],"cveId":"CVE-2026-92905","cwes":["CWE-122"],"description":"Zoho Corporation ManageEngine EventLog Analyzer and Log360 versions below 13071 are vulnerable to a denial-of-service (DoS) vulnerability in the log collector component.","epss":{"date":"2026-11-10","percentile":0.63929,"score":0.01028},"exploits":[],"kev":null,"metrics":[{"score":5.3,"severity":"medium","source":"CNA: Zohocorp","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","version":"3.1"}],"modifiedAt":1794381734443,"publishedAt":1790241029996,"references":[{"source":"CNA: Zohocorp","tags":[],"url":"https://www.manageengine.com/log-management/advisory/CVE-2026-92905.html"}],"remediation":[],"revision":"36db5d31bd175dcadec1a5061c4d7f757bc0bd893907b06f534999025ccf0052","sources":[{"modifiedAt":1794381734443,"name":"CNA: Zohocorp","retrievedAt":1794384526193,"url":"https://www.cve.org/CVERecord?id=CVE-2026-92905"},{"modifiedAt":null,"name":"FIRST EPSS","retrievedAt":1794384529480,"url":"https://api.first.org/data/v1/epss?cve=CVE-2026-92905"}],"ssvc":{"assessedAt":1790253701970,"automatable":"yes","exploitation":"none","source":"ADP: CISA-ADP","technicalImpact":"partial"},"status":"published","title":"Denial of Service (DoS)","updatedAt":1794384529480}