Beveiligingsadvies

CVE-2026-11374

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-06-23 08:19:30
Laatst bijgewerkt 2026-06-24 15:48:27
Toegewezen door Zohocorp
CVSS-score 9.0
Status PUBLISHED

Beschrijving

In ManageEngine ADSelfService Plus, RecoveryManager Plus, M365 Manager Plus, and ADAudit Plus, the SSO tickets generated to authenticate that session could be predicted by an unauthenticated user, leading to account takeover.