CVE-2025-11250

—

CVSS 3.1

9.1 critical

EPSS

1%p72

Published

Jan 13, 2026 (Jan 13, 2026)

Modified

Jun 17, 2026

Description

Zohocorp ManageEngine ADSelfService Plus versions before 6519 are vulnerable to Authentication Bypass due to improper filter configurations.

Vendors: zohocorp
Products: manageengine adselfservice plus
Weakness: CWE-290
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

NVD CVE.org GitHub PoCs EPSS (1.5%)

In the news0 stories

No ingested article mentions this CVE yet.