Advisories · Technology

Zohocorp ManageEngine ADSelfService Plus.

Every CVE that names Zohocorp ManageEngine ADSelfService Plus among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-75791 CVE record

CVSS 8.6 High

Authentication bypass vulnerability
- Zohocorp ManageEngine ADSelfService Plus
- Authentication bypass
Not analysed yet 22 Sept 2026
CVE-2026-74849 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Remote code execution vulnerability
- Zohocorp ManageEngine ADSelfService Plus
- Command injection
Not analysed yet 22 Sept 2026
CVE-2026-3183 CVE record

CVSS 7.1 High

Multi Factor Auth Bypass
- Zohocorp ManageEngine ADSelfService Plus
- Authentication bypass
Not analysed yet 21 Jul 2026
CVE-2026-11374 CVE record

CVSS 9.0 CriticalCritical · CVSS 9+

Account Takeover via Predictable SSO Ticket Generation
- zohocorp manageengine_adselfservice_plus
- zohocorp manageengine_recovery_manager_plus
- Authentication bypass
- Weak cryptography or TLS
Not analysed yet 23 Jun 2026
CVE-2026-2740 CVE record

CVSS 8.4 High

Remote Code Execution
- Zohocorp ManageEngine ADSelfService Plus
- Zohocorp ManageEngine DataSecurity Plus
- Command injection
Not analysed yet 21 May 2026
CVE-2026-1367 CVE record

CVSS 8.3 High

SQL Injection
- Zohocorp ManageEngine ADSelfService Plus
- SQL injection
Not analysed yet 23 Feb 2026
CVE-2025-11250 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

Authentication Bypass
- Zohocorp ManageEngine ADSelfService Plus
- Authentication bypass
Not analysed yet 13 Jan 2026