CVE-2026-11374criticalCWE-287CWE-330CWE-340

CVE-2026-11374: critical vulnerability in zohocorp manageengine_adaudit_plus

Account Takeover via Predictable SSO Ticket Generation

Published · Updated

Follow this CVE+ Monitor ManageEngine ADSelfService Plus+ Monitor manageengine adaudit plus

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

48Vexday Risk Score

No sign of exploitation. It has a public proof of concept.

ssvc Attendcvss 9epss 2.5%
from disclosure to weapon27 days
Published on NVDJun 23
1st PoC+27d
In ManageEngine ADSelfService Plus, RecoveryManager Plus, M365 Manager Plus, and ADAudit Plus, the SSO tickets generated to authenticate that session could be predicted by an unauthenticated user, leading to account takeover.
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
Affected products
zohocorp · manageengine_adaudit_pluszohocorp · manageengine_adselfservice_pluszohocorp · manageengine_m365_manager_pluszohocorp · manageengine_recovery_manager_plus
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.