Product · Zohocorp

ManageEngine ADSelfService Plus

7 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

Critical 9.0

CVE-2026-11374 Public exploit

Account Takeover via Predictable SSO Ticket Generation

In ManageEngine ADSelfService Plus, RecoveryManager Plus, M365 Manager Plus, and ADAudit Plus, the SSO tickets generated to authenticate that session could be predicted by an unauthenticated user, leading to account takeover.

Zohocorp ManageEngine ADSelfService Plus ManageEngine ADAudit Plus manageengine_m365_manager_plus

Jun 23, 2026