Paper/Archive/CVE-2026-11374

CVE-2026-11374

zohocorp manageengine_adselfservice_plus — Account Takeover via Predictable SSO Ticket Generation

CVSS 9.0 (CNA)9.0 / 10 × 3027.0 Not in CISA KEV+300.0 EPSS percentile 84.9.849 × 2017.0 No public exploit+100.0 SSVC exploitation: none+100.0

Description · from the CVE record

In ManageEngine ADSelfService Plus, RecoveryManager Plus, M365 Manager Plus, and ADAudit Plus, the SSO tickets generated to authenticate that session could be predicted by an unauthenticated user, leading to account takeover.

Affected

ProductAffectedFixed inSource

manageengine_adselfservice_plus< 65296529CNA

manageengine_recovery_manager_plus< 63216321CNA

manageengine_m365_manager_plus< 48174817CNA

manageengine_adaudit_plus< 87038703CNA

Scores by source

Zohocorp (CNA)9.0CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H

CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: total

References

refmanageengine.com/products/self-service-password/advisory/CVE-2026-11374.html