5235 matches found
CVE-2026-12571
An authentication bypass in ManageEngine DDI Central's password-reset workflow allows account takeover...
CVE-2026-12571
The CVE-2026-12571 entry describes an authentication bypass in ManageEngine DDI Central’s password-reset workflow that enables account takeover. The NVD entry confirms a critical impact (CVSS 3.1: 9.8, NETWORK attack vector, no user interaction) with high impact on confidentiality, integrity, and...
CVE-2026-12571 Authentication Bypass Leading to Account Takeover
An authentication bypass in ManageEngine DDI Central's password-reset workflow allows account takeover...
EUVD-2026-56557
An authentication bypass in ManageEngine DDI Central's password-reset workflow allows account takeover...
CVE-2026-16053
Zohocorp ManageEngine M365 Manager Plus and M365 Security Plus versions below 4820 are affected to Authenticated Path Traversal vulnerability in Exchange Online backup module...
CVE-2026-16053 Path Traversal
Zohocorp ManageEngine M365 Manager Plus and M365 Security Plus versions below 4820 are affected to Authenticated Path Traversal vulnerability in Exchange Online backup module...
CVE-2026-16053
Zohocorp ManageEngine M365 Manager Plus and M365 Security Plus versions below 4820 are affected to Authenticated Path Traversal vulnerability in Exchange Online backup module...
PT-2026-70365
Name of the Vulnerable Software and Affected Versions ManageEngine DDI Central affected versions not specified Description An authentication bypass exists in the password-reset workflow, which could allow an attacker to perform an account takeover. Recommendations At the moment, there is no...
ManageEngine Endpoint Central < 11.4.2528.34 / 11.5.x < 11.5.2600.13 Cleartext Transmission of Sensitive Information
The version of ManageEngine Endpoint Central installed on the remote host is prior to 11.4.2528.34 or 11.5.x prior to 11.5.2600.13. It is, therefore, affected by a cleartext transmission of sensitive information vulnerability. Note that Nessus has not tested for this issue but has instead relied...
ManageEngine ADAudit Plus < Build 8606 Unauthenticated RCE
The ManageEngine ADAudit Plus running on the remote host is prior to build 8606. It is, therefore, affected by an unauthenticated remote code execution vulnerability: - Zohocorp ManageEngine ADAudit Plus versions before 8606 are affected by unauthenticated remote code execution due to the...
The vulnerability was not addressed in ManageEngine ADAudit Plus of ZohoCorp.
ZohoCorp has identified a vulnerability in ManageEngine ADAudit Plus. The vulnerability resides in the agent API of ManageEngine ADAudit Plus versions prior to 8606. Due to incorrect validation in the API, attackers can execute arbitrary code without authentication. All implementations using...
CVE-2026-6516
Zohocorp ManageEngine ADAudit Plus versions before 8606 are affected by Unauthenticated Remote code execution due to the vulnerable agent API...
CVE-2026-6516
Zohocorp ManageEngine ADAudit Plus versions before 8606 are affected by Unauthenticated Remote code execution due to the vulnerable agent API...
CVE-2026-6516 Remote Code Execution
Zohocorp ManageEngine ADAudit Plus versions before 8606 are affected by Unauthenticated Remote code execution due to the vulnerable agent API...
CVE-2026-6516
CVE-2026-6516 affects Zohocorp ManageEngine ADAudit Plus versions before 8606. The issue is an unauthenticated remote code execution vulnerability caused by the vulnerable agent API, as described in the NVD entry. The CVSS‑3.1 metrics indicate a critical severity (10.0) with network attack vector...
ManageEngine AD360 Detection Tool
A proof of concept detection tool for ManageEngine AD360 products affected by CVE-2026-11374. The Python utility safely checks whether an ADSelfService Plus, RecoveryManager Plus, M365 Manager Plus, or ADAudit Plus deployment is AD360-integrated and therefore meets the exploit precondition for th...
CVE-2026-3183
Zohocorp ManageEngine ADSelfService Plus versions before 6524 are vulnerable to Multi Factor Authentication Bypass...
CVE-2026-3183
CVE-2026-3183 affects ManageEngine ADSelfService Plus versions before 6524. The vulnerability is described as a Multi Factor Authentication (MFA) bypass, enabling an attacker with network access and low privileges to bypass MFA (per CVSS 3.1 metrics: AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N; base scor...