CVE-2019-12476

ADSelfService-Plus-PoC CVE-2019-12476 ADSelfService Plus versión 4.3.3 PoC para una evasión de autenticación en Windows 10. Afecta a todas las versiones de Windows Video del PoC Pasos para reproducir 1. Desconéctese de su red empresarial 2. Conéctese a su propio punto de acceso 3. Haga clic en...

Zoho ManageEngine ADSelfService Plus 6121 - Username Enumeration

Zoho ManageEngine ADSelfService Plus 6121 is vulnerable to username enumeration CVE-2022-28987. The Forgot Password functionality responds differently for existing and non-existing users, allowing attackers to enumerate valid usernames. id: CVE-2022-28987 info: name: Zoho ManageEngine ADSelfServi...

CVE-2021-40539

CVE-2021-40539 CVE-2021-40539: Vulnerabilidad RCE en ADSelfService Plus 1. Descripción de la vulnerabilidad ZOHO ManageEngine ADSelfService Plus es la solución integrada de gestión de contraseñas de autoservicio e inicio de sesión único de ZOHO para Active Directory y aplicaciones en la nube...

CVE-2021-40539

CVE-2021-40539 CVE-2021-40539: Vulnerabilidad RCE en ADSelfService Plus 1. Descripción de la vulnerabilidad ZOHO ManageEngine ADSelfService Plus es la solución integrada de gestión de contraseñas de autoservicio e inicio de sesión único de ZOHO para Active Directory y aplicaciones en la nube...

ADSelfService-Plus-RCE-CVE-2021-40539

ADSelfService-Plus-RCE-CVE-2021-40539 Herramienta de detección de vulnerabilidades RCE para ADSelfService Plus fork Descripción ZOHO ManageEngine ADSelfService Plus es una solución integrada de gestión de contraseñas de autoservicio e inicio de sesión único de ZOHO para Active Directory y...

Zoho ManageEngine ADSelfService Plus v6113 - Unauthenticated Remote Command Execution

Zoho ManageEngine ADSelfService Plus version 6113 and prior are vulnerable to a REST API authentication bypass vulnerability that can lead to remote code execution. id: CVE-2021-40539 info: name: Zoho ManageEngine ADSelfService Plus v6113 - Unauthenticated Remote Command Execution author:...

ManageEngine ADSelfService Plus < Build 7001 RCE (CVE-2026-74849)

According to its self-reported version, the ManageEngine ADSelfService Plus application running on the remote host is prior to build 7001. It is, therefore, affected by a remote code execution vulnerability: - Zohocorp ManageEngine ADSelfService Plus versions before build 7001 are vulnerable to a...

CVE-2026-75791

Zohocorp ManageEngine ADSelfService Plus versions before build 7001 are vulnerable to an authentication bypass vulnerability in the REST API...

CVE-2026-74849

Zohocorp ManageEngine ADSelfService Plus versions before build 7001 are vulnerable to a remote code execution vulnerability in the GINA client...

CVE-2026-75791 Authentication bypass vulnerability

Zohocorp ManageEngine ADSelfService Plus versions before build 7001 are vulnerable to an authentication bypass vulnerability in the REST API...

CVE-2026-75791 Authentication bypass vulnerability

Zohocorp ManageEngine ADSelfService Plus versions before build 7001 are vulnerable to an authentication bypass vulnerability in the REST API...

EUVD-2026-84364

Zohocorp ManageEngine ADSelfService Plus versions before build 7001 are vulnerable to an authentication bypass vulnerability in the REST API...

CVE-2026-75791

ManageEngine ADSelfService Plus (by Zohocorp) versions before build 7001 are affected by an authentication bypass in its REST API . The vulnerability allows unauthenticated remote attackers to bypass authentication, with a CVSS 3.1 score of 8.6 (HIGH) — low attack complexity, no privileges or use...

CVE-2026-74849 Remote code execution vulnerability

Zohocorp ManageEngine ADSelfService Plus versions before build 7001 are vulnerable to a remote code execution vulnerability in the GINA client...

CVE-2026-74849 Remote code execution vulnerability

Zohocorp ManageEngine ADSelfService Plus versions before build 7001 are vulnerable to a remote code execution vulnerability in the GINA client...

CVE-2026-74849

Zohocorp ManageEngine ADSelfService Plus versions prior to build 7001 contain a remote code execution vulnerability in the GINA client . The CNA-assigned CVSS v3.1 score is 9.8 (CRITICAL) with vector AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H, indicating a network-exploitable flaw requiring no authentic...

PT-2026-96712

Name of the Vulnerable Software and Affected Versions ManageEngine ADSelfService Plus versions prior to build 7001 Description A remote code execution issue exists in the GINA client, which could lead to full system compromise. Recommendations Update to build 7001...

PT-2026-96713

Name of the Vulnerable Software and Affected Versions ManageEngine ADSelfService Plus versions prior to build 7001 Description An authentication bypass exists in the REST API, allowing an attacker to gain unauthorized access to the system. Recommendations Update ManageEngine ADSelfService Plus to...

CVE-2026-74849: Improper Neutralization of Special Elements used in an OS Command

Zohocorp ManageEngine ADSelfService Plus versions before build 7001 are vulnerable to a remote code execution vulnerability in the GINA client...

CVE-2026-75791: Missing Authentication for Critical Function

Zohocorp ManageEngine ADSelfService Plus versions before build 7001 are vulnerable to an authentication bypass vulnerability in the REST API...