← All advisories

Critical severity9.8NVD Advisory· Published Sep 22, 2026· Updated Sep 23, 2026

CVE-2026-74849

CVE-2026-74849

Description

Zohocorp ManageEngine ADSelfService Plus versions before build 7001 are vulnerable to a remote code execution vulnerability in the GINA client.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

1

Zohocorp/Manageengine Adselfservice Plusllm-fuzzy
Range: <7001

Patches

Vulnerability mechanics

References

1

www.manageengine.com/products/self-service-password/advisory/CVE-2026-74849.htmlnvd

News mentions

3

⚡ Weekly Recap: NetScaler and FortiMail 0-Days, AI Coding Leaks, Spectre v2 and Ransomware Arrests
The Hacker News · Oct 5, 2026
Zoho ManageEngine: 20 Vulnerabilities Disclosed, Including Critical RCE and Auth Bypass
Vypr Intelligence · Sep 24, 2026
Critical ManageEngine Flaw Lets Attackers Gain SYSTEM Access Through Windows Login Screen
Cyber Security News · Sep 23, 2026