The vulnerability was not addressed in ManageEngine ADAudit Plus of ZohoCorp.

ZohoCorp has identified a vulnerability in ManageEngine ADAudit Plus. The vulnerability resides in the agent API of ManageEngine ADAudit Plus versions prior to 8606. Due to incorrect validation in the API, attackers can execute arbitrary code without authentication. All implementations using...

CVE-2026-6516

Zohocorp ManageEngine ADAudit Plus versions before 8606 are affected by Unauthenticated Remote code execution due to the vulnerable agent API...

CVE-2026-6516

Zohocorp ManageEngine ADAudit Plus versions before 8606 are affected by Unauthenticated Remote code execution due to the vulnerable agent API...

CVE-2026-6516 Remote Code Execution

Zohocorp ManageEngine ADAudit Plus versions before 8606 are affected by Unauthenticated Remote code execution due to the vulnerable agent API...

CVE-2026-6516

CVE-2026-6516 affects Zohocorp ManageEngine ADAudit Plus versions before 8606. The issue is an unauthenticated remote code execution vulnerability caused by the vulnerable agent API, as described in the NVD entry. The CVSS‑3.1 metrics indicate a critical severity (10.0) with network attack vector...

ManageEngine AD360 Detection Tool

A proof of concept detection tool for ManageEngine AD360 products affected by CVE-2026-11374. The Python utility safely checks whether an ADSelfService Plus, RecoveryManager Plus, M365 Manager Plus, or ADAudit Plus deployment is AD360-integrated and therefore meets the exploit precondition for th...

CVE-2026-3183

Zohocorp ManageEngine ADSelfService Plus versions before 6524 are vulnerable to Multi Factor Authentication Bypass...

EUVD-2026-46164

Zohocorp ManageEngine ADSelfService Plus versions before 6524 are vulnerable to Multi Factor Authentication Bypass...

CVE-2026-3183

CVE-2026-3183 affects ManageEngine ADSelfService Plus versions before 6524. The vulnerability is described as a Multi Factor Authentication (MFA) bypass, enabling an attacker with network access and low privileges to bypass MFA (per CVSS 3.1 metrics: AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N; base scor...

CVE-2026-3183 Multi Factor Auth Bypass

Zohocorp ManageEngine ADSelfService Plus versions before 6524 are vulnerable to Multi Factor Authentication Bypass...

CVE-2026-3182

Zohocorp ManageEngine Endpoint Central versions before 11.4.2528.34 are affected by cleartext transmission of sensitive information vulnerability...

CVE-2026-3182 Sensitive Data Exposure

Zohocorp ManageEngine Endpoint Central versions before 11.4.2528.34 are affected by cleartext transmission of sensitive information vulnerability...

EUVD-2026-46154

Zohocorp ManageEngine Endpoint Central versions before 11.4.2528.34 are affected by cleartext transmission of sensitive information vulnerability...

ManageEngine ADAudit Plus < Build 8703 Account Takeover (CVE-2026-11374)

The version of ManageEngine ADAudit Plus installed on the remote host is prior to build 8703. It is, therefore, affected by an account takeover vulnerability: - The SSO tickets generated to authenticate a session could be predicted by an unauthenticated user, leading to account takeover...

ManageEngine ADSelfService Plus < Build 6529 Account Takeover (CVE-2026-11374)

According to its self-reported version, the ManageEngine ADSelfService Plus application running on the remote host is prior to build 6529. It is, therefore, affected by an account takeover vulnerability: - The SSO tickets generated to authenticate a session could be predicted by an unauthenticate...

CVE-2026-11374

In ManageEngine ADSelfService Plus, RecoveryManager Plus, M365 Manager Plus, and ADAudit Plus, the SSO tickets generated to authenticate that session could be predicted by an unauthenticated user, leading to account takeover...

CVE-2026-11374 Account Takeover via Predictable SSO Ticket Generation

In ManageEngine ADSelfService Plus, RecoveryManager Plus, M365 Manager Plus, and ADAudit Plus, the SSO tickets generated to authenticate that session could be predicted by an unauthenticated user, leading to account takeover...

CVE-2026-11374 Account Takeover via Predictable SSO Ticket Generation

In ManageEngine ADSelfService Plus, RecoveryManager Plus, M365 Manager Plus, and ADAudit Plus, the SSO tickets generated to authenticate that session could be predicted by an unauthenticated user, leading to account takeover...

EUVD-2026-38423

In ManageEngine ADSelfService Plus, RecoveryManager Plus, M365 Manager Plus, and ADAudit Plus, the SSO tickets generated to authenticate that session could be predicted by an unauthenticated user, leading to account takeover...

CVE-2026-11374

CVE-2026-11374 affects ManageEngine ADSelfService Plus, RecoveryManager Plus, M365 Manager Plus, and ADAudit Plus. The issue allows unauthenticated users to predict SSO tickets used to authenticate sessions, enabling account takeover. The CVSS v3.1 metrics in the provided data indicate a CRITICAL...