TL;DR Zoho Corporation patched a critical ManageEngine ADSelfService Plus vulnerability affecting the GINA client. This flaw allows attackers with physical or remote access to the Windows logon screen to execute arbitrary code. System administrators must update to build 7001 or later to secure their environments. Why It Matters Enterprise IT departments deploy ADSelfService Plus to reduce helpdesk tickets by allowing users to reset their own passwords.