CVE-2026-74849

CVSS 9.8 (critical) · published 2026-09-22

Zohocorp ManageEngine ADSelfService Plus versions before build 7001 are vulnerable to a remote code execution vulnerability in the GINA client.

Weakness: CWE-78

Source: NVD CVE-2026-74849

References

• https://www.manageengine.com/products/self-service-password/advisory/CVE-2026-74849.html

Check your software

Connect an AI agent to the FixLane MCP server or ask the Telegram bot to check what you have installed against incidents with a verified fixed version.