Versions of ManageEngine ADSelfService Plus before build 7001 contain a weakness in the GINA client that could let an attacker run code on your server.

TL;DR Zoho Corporation patched a critical ManageEngine ADSelfService Plus vulnerability affecting the GINA client. This flaw allows attackers with physical or remote access to the Windows logon screen to execute arbitrary code. System administrators must update to build 7001 or later to secure their environments. Why It Matters Enterprise IT departments deploy ADSelfService Plus to reduce helpdesk tickets by allowing users to reset their own passwords.

Zohocorp ManageEngine ADSelfService Plus versions before build 7001 are vulnerable to an authentication bypass vulnerability in the REST API.

ManageEngineは、ADSelfService Plusに存在する深刻度の高いリモートコード実行の脆弱性を修正しました。この脆弱性は、Windowsのログオン画面に物理的にアクセスできる未認証の攻撃者が、NT AUTHORITY\SYSTEM権限で任意のコードを実行できてしまうというものです。 CVE-202

As part of my role as Service Architect here at SpecterOps, one of the things I’m tasked with is exploring all kinds of technologies to help those on assessments with advancing their engagement. Not l...

ManageEngineは、ADSelfService Plusに存在する深刻なリモートコード実行脆弱性への対応を発表しました。この脆弱性を悪用すると、未認証の攻撃者が任意のコードを実行できる可能性があり、Windowsデバイスのログオン画面からNT AUTHORITY\SYSTEM権限でコードを実行できてしまいます

CVE-2025-1723 poses a significant risk for Zoho ADSelfService Plus users. Discover how to secure your data and avoid account takeover.

Official websites use .gov A .gov website belongs to an official government organization in the United States.

Zohocorp ManageEngine ADSelfService Plus versions 6510 and below are vulnerable to account takeover due to the session mishandling. Valid account holders in the setup only have the potential to exploit this bug.

ManageEngine has disclosed a high-severity vulnerability, tracked as CVE-2026-11374, affecting several of its identity and access management solutions when integrated with AD360. The flaw could allow unauthenticated attackers to predict single sign-on (SSO) tokens , potentially leading to account takeover and exposure of sensitive user information. The issue affects ADSelfService Plus, RecoveryManager Plus, M365 Manager Plus, and ADAudit Plus when deployed within the ManageEngine AD360 environment. These tools are commonly used across enterprise networks for identity governance, Active Directory management , auditing, and Microsoft 365 administration, making the vulnerability particularly significant in large-scale deployments. ManageEngine AD360 Integration Flaw The vulnerability was reported by security researcher 0xmanhnv through the Zoho BugBounty program, and ManageEngine has credited the researcher for the responsible disclosure. According to the advisory, the vulnerability stems from weaknesses in the generation of SSO tickets during authentication. When a user logs in via AD360’s SSO, the system issues a token to validate the session. However, researchers found that an unauthenticated attacker could predict these tokens. This predictability opens the door for attackers to craft valid session tokens without needing legitimate credentials. Exploitation of this flaw could allow attackers to impersonate users and gain unauthorized access to systems. In such scenarios, attackers may retrieve user identity details and role-based access information, which could, in turn, enable privilege escalation depending on the compromised account. In environments where AD360 acts as a central identity hub, this risk becomes more severe as multiple integrated services could be exposed through a single successful attack. An attacker could generate a valid SSO token to gain unauthorized access to ADAudit Plus audit logs and administrative data, enabling internal reconnaissance and potential lateral movement within the organization. The vulnerability affects ADSelfService Plus version 6528 and earlier, RecoveryManager Plus version 6320 and earlier, M365 Manager Plus version 4816 and earlier, and ADAudit Plus version 8702 and earlier. ManageEngine has released patches to address the issue in subsequent versions released between June 3 and June 12, 2026. To mitigate the risk, ManageEngine has strengthened the SSO ticket generation mechanism to ensure tokens are no longer predictable. Organizations using affected products are strongly advised to apply the latest service packs immediately to secure their environments. In addition to patching, security teams should closely monitor authentication logs for unusual SSO activity and review access permissions across critical accounts. Strengthening access controls and limiting exposure of identity services can further reduce the risk of exploitation. Follow us on  Google News ,  LinkedIn , and  X  to Get More Instant Updates. The post ManageEngine AD360 Integration Flaw Exposes User Identity and Role Information to Attackers appeared first on Cyber Security News .

Zohocorp ManageEngine ADSelfService Plus versions before 6524 are vulnerable to Multi Factor Authentication Bypass.

Zohoが提供する「ManageEngine」の複数製品において認証回避の脆弱性が明らかとなった。6月前半に公開されたアップデートで修正済みだという。 ：Security NEXT

Vulnerability-Lookup - Fast vulnerability lookup correlation from different sources.