ManageEngine ADAudit Plus EUVD-2026-48337

Exploitation requires network access to the ADAudit Plus agent API on a vulnerable server running any build before 8606; per the CVSS vector (AV:N/AC:L/PR:N/UI:N) no authentication, no elevated privileges, and no user interaction are needed, so any actor who can reach the agent API endpoint can attempt it against a default installation. The primary limiting factor is network reachability of the agent API - deployments where the ADAudit Plus server and its agent ports are firewalled off from untrusted networks (internal-only, no internet exposure) sharply narrow the attack surface - along with the version constraint (build 8606+ is not vulnerable). No special non-default feature toggle is documented as a prerequisite in the available data.

All authoritative signals point to top-tier risk: the CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:L) describes a network-reachable, low-complexity, unauthenticated attack with no user interaction and a scope change, yielding the maximum 10.0 score. The combination of unauthenticated access (PR:N) and OS command injection is exactly the profile that gets rapidly weaponized once details circulate, and ManageEngine products have a strong historical track record of being targeted (multiple prior ManageEngine RCEs have reached CISA KEV). Mitigating the urgency slightly: there is no public exploit identified at time of analysis, no CISA KEV listing, and no EPSS or SSVC data was provided in the input, so exploitation-probability scoring cannot be independently confirmed here. One internal inconsistency to verify: the vendor vector sets A:L (only low availability impact) even though full OS command execution would normally imply complete availability compromise (A:H) - this likely reflects a conservative vendor scoring choice rather than a real limitation. Net assessment: treat as a genuine emergency-patch item for internet- or broadly-network-exposed instances, not a high-CVSS-but-low-real-risk case.

An attacker with network reachability to an ADAudit Plus server sends a crafted request to the exposed agent API endpoint, embedding shell metacharacters or command payloads into a parameter that the server passes to an OS command. Because no authentication is required (PR:N) and complexity is low, the injected command executes on the host in the context of the ADAudit Plus service, giving the attacker a foothold on an Active Directory auditing system. No public exploit identified at time of analysis, so this scenario is inferred from the CWE-78 classification and CVSS vector rather than an observed PoC.