CVE-2026-16053

The vulnerability affects Zohocorp ManageEngine M365 Manager Plus and M365 Security Plus versions prior to 4820, specifically within the Exchange Online backup module, allowing authenticated users to exploit a path traversal flaw. This could lead to unauthorized access to sensitive files and data, posing a significant risk to the security of the affected systems. Organizations using these ManageEngine products should prioritize patching to mitigate potential data breaches and unauthorized access.