EUVD-2026-31283
GHSA-hrrx-gqw9-2hrq
CVSS VectorNVD
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:L
Lifecycle Timeline
2DescriptionNVD
Zohocorp ManageEngine ADSelfService Plus version before 6525, DataSecurity Plus before 6264 and RecoveryManager Plus before 6313 are vulnerable to Authenticated Remote code execution in the agent machines due to the bug in the 3rd party dependency.
AnalysisAI
Authenticated remote code execution affects Zoho ManageEngine ADSelfService Plus (before build 6525), DataSecurity Plus (before 6264), and RecoveryManager Plus (before 6313) on agent machines, stemming from a flaw in a bundled third-party dependency. An authenticated attacker with low privileges can inject commands (CWE-77) to execute arbitrary code on managed agent endpoints, with no public exploit identified at time of analysis.
Sign in for full analysis, threat intelligence, and remediation guidance.
RemediationAI
Within 24 hours: Identify all Zoho ManageEngine deployments and current versions; restrict administrative access to trusted networks only. Within 7 days: Deploy patches to ADSelfService Plus (build 6525 or later), DataSecurity Plus (6264 or later), and RecoveryManager Plus (6313 or later) after testing in non-production. …
Sign in for detailed remediation steps.
Share
External POC / Exploit Code
Leaving vuln.today