CVE-2026-11374

In ManageEngine ADSelfService Plus, RecoveryManager Plus, M365 Manager Plus, and ADAudit Plus, the SSO tickets generated to authenticate that session could be predicted by an unauthenticated user, leading to account takeover.

CVSS v3 9.0 CRITICAL

9.0^/10

CVSS v3 : CRITICAL

Vector :

Exploitability : 2.2 / Impact : 6.0

Attack Vector NETWORK

Attack Complexity HIGH

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope CHANGED

References

Link	Resource
https://www.manageengine.com/products/self-service-password/advisory/CVE-2026-11374.html

Configurations

No configuration.

History

23 Jun 2026, 09:16

Type	Values Removed	Values Added
New CVE

Information

Published : 2026-06-23 09:16

Updated : 2026-06-24 17:16

NVD link : CVE-2026-11374

Mitre link : CVE-2026-11374

CVE.ORG link : CVE-2026-11374

JSON object : View

Products Affected

No product.

CWE

CWE-287

Improper Authentication

CWE-330

Use of Insufficiently Random Values

CWE-340

Generation of Predictable Numbers or Identifiers

{"id": "CVE-2026-11374", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-11374", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "version": "2.0.3", "timestamp": "2026-06-24T03:56:06.337907Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "0fc0942c-577d-436f-ae8e-945763c79b02", "cvssData": {"scope": "CHANGED", "version": "3.1", "baseScore": 9.0, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "HIGH", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 6.0, "exploitabilityScore": 2.2}]}, "affected": [{"source": "0fc0942c-577d-436f-ae8e-945763c79b02", "affectedData": [{"vendor": "zohocorp", "product": "manageengine_adselfservice_plus", "versions": [{"status": "affected", "version": "0", "lessThan": "6529", "versionType": "custom"}], "platforms": ["Windows"], "defaultStatus": "unaffected"}, {"vendor": "zohocorp", "product": "manageengine_recovery_manager_plus", "versions": [{"status": "affected", "version": "0", "lessThan": "6321", "versionType": "custom"}], "platforms": ["Windows"], "defaultStatus": "unaffected"}, {"vendor": "zohocorp", "product": "manageengine_m365_manager_plus", "versions": [{"status": "affected", "version": "0", "lessThan": "4817", "versionType": "custom"}], "platforms": ["Windows"], "defaultStatus": "unaffected"}, {"vendor": "zohocorp", "product": "manageengine_adaudit_plus", "versions": [{"status": "affected", "version": "0", "lessThan": "8703", "versionType": "custom"}], "platforms": ["Windows"], "defaultStatus": "unaffected"}]}], "published": "2026-06-23T09:16:28.477", "references": [{"url": "https://www.manageengine.com/products/self-service-password/advisory/CVE-2026-11374.html", "source": "0fc0942c-577d-436f-ae8e-945763c79b02"}], "vulnStatus": "Awaiting Analysis", "weaknesses": [{"type": "Secondary", "source": "0fc0942c-577d-436f-ae8e-945763c79b02", "description": [{"lang": "en", "value": "CWE-287"}, {"lang": "en", "value": "CWE-330"}, {"lang": "en", "value": "CWE-340"}]}], "descriptions": [{"lang": "en", "value": "In ManageEngine ADSelfService Plus, RecoveryManager Plus, M365 Manager Plus, and ADAudit Plus, the SSO tickets generated to authenticate that session could be predicted\n by an unauthenticated user, leading to account takeover."}], "lastModified": "2026-06-24T17:16:56.437", "sourceIdentifier": "0fc0942c-577d-436f-ae8e-945763c79b02"}