CVE-2026-12062

CVSS 8.8 (high) · published 2026-11-11

Zoho Corporation ManageEngine ADAudit Plus versions below 8703 are vulnerable to an authenticated SQL injection vulnerability in ADAudit Plus Reports API.

Weakness: CWE-89

Source: NVD CVE-2026-12062

References

• https://www.manageengine.com/products/active-directory-audit/cve-2026-12062.html

Check your software

Connect an AI agent to the FixLane MCP server or ask the Telegram bot to check what you have installed against incidents with a verified fixed version.