CVE-2026-74849

Zohocorp ManageEngine ADSelfService Plus versions before build 7001 are vulnerable to a remote code execution vulnerability in the GINA client.

  • Published Sep 22, 2026
  • CVSS 9.8 critical
  • 4.6% chance of exploitation in the next 30 days (EPSS)

Affected software

In the news

CVE-2026-74849 at the National Vulnerability Database