#zohocorp
3 articles
Security Alerts Nov 12, 2026
CVE-2026-12507: RCE via Reports Module in ManageEngine ServiceDesk Plus
A user with the Create Query Reports permission in ManageEngine ServiceDesk Plus, ServiceDesk Plus MSP, AssetExplorer and SupportCenter Plus can execute arbitrary commands on the server...
Security Alerts Nov 12, 2026
CVE-2026-12591: Privilege Escalation to RCE in ManageEngine M365 Manager Plus
An authenticated technician in ManageEngine M365 Manager Plus before build 4818 can escalate privileges via the delegated administration interface, leading to remote code execution...
Security Alerts Jul 23, 2026
CVE-2026-6516: unauthenticated RCE via agent API in ManageEngine ADAudit Plus (CVSS 10.0)
Zohocorp ManageEngine ADAudit Plus versions before 8606 are affected by Unauthenticated Remote code execution due to the vulnerable agent API....