CVE-2026-76981

CVSS 8.8 (high) · published 2026-11-11

Zoho Corporation ManageEngine ADAudit Plus versions below 8711 are vulnerable to an authenticated second order SQL injection vulnerability affecting ADAudit Plus custom reports module.

Weakness: CWE-89

Source: NVD CVE-2026-76981

References

• https://www.manageengine.com/log-management/advisory/CVE-2026-92905.html

Check your software

Connect an AI agent to the FixLane MCP server or ask the Telegram bot to check what you have installed against incidents with a verified fixed version.