CVE-2026-74849

Zohocorp ManageEngine ADSelfService Plus versions before build 7001 are vulnerable to a remote code execution vulnerability in the GINA client.

Score

CVSS 3.1 9.8 Critical

Status

Awaiting Analysis - 0fc0942c-577d-436f-ae8e-945763c79b02

Published

2026-09-22

Last modified

2026-09-23

Weaknesses

CWE-78

Affected products

• Manageengine Adselfservice Plus (Zohocorp)

References

• https://www.manageengine.com/products/self-service-password/advisory/CVE-2026-74849.html