CVE-2026-1367

—

CVSS 3.1

8.3 high

EPSS

7%p94

Published

Feb 23, 2026 (Feb 23, 2026)

Modified

Jun 17, 2026

Description

Zohocorp ManageEngine ADSelfService Plus versions 6522 and below are vulnerable to authenticated SQL Injection in the search report option.

Weakness: CWE-89
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L

NVD CVE.org GitHub PoCs EPSS (7.4%)

In the news0 stories

No ingested article mentions this CVE yet.