High · 8.8 CVE-2026-76981 EUVD-2026-123274GHSA-7hq5-2jh9-qmh8

Zoho Corporation ManageEngine ADAudit Plus versions below 8711 are vulnerable to an authenticated second order SQL injection vulnerability …

Published Nov 11, 2026 · Assigned by Zohocorp

Vendor: ManageEngine Product: ADAudit Plus

Description

Zoho Corporation ManageEngine ADAudit Plus versions below 8711 are vulnerable to an authenticated second order SQL injection vulnerability affecting ADAudit Plus custom reports module.

Affected products

Vendor	Product	Affected	Fixed
ManageEngine	ADAudit Plus	0 <8711	—

References

https://www.manageengine.com/log-management/advisory/CVE-2026-92905.html