Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.
← back | CVE Intelligence

CVE-2026-11374 [Critical]

Curated 1 security research writeups, vulnerability advisories and exploitation analyses for CVE-2026-11374.

Vendor
ManageEngine
Product
AD360-integrated products
Affected versions
ADSelfService Plus < 6529; RecoveryManager Plus < 6321; M365 Manager Plus < 4817; ADAudit Plus < 8703
CVSS
9
Coverage Span
2026-07-21
Reports
1 related reports

Associated Reports & Timeline

1.
A Millisecond of Predictability: Why CVE-2026-11374 Is Hard to Exploit
bishopfox.com | vulnerability | Critical | | original ↗ | #featured | #vulnerability-research | #account-takeover | #active-directory
Bishop Fox analyzes CVE-2026-11374, a timing-dependent but critical unauthenticated account-takeover path across four AD360-integrated ManageEngine products. Fixed builds are ADSelfService Plus 6529, RecoveryManager Plus 6321, M365 Manager Plus 4817 and ADAudit Plus 8703.
Why it matters: The flaw can yield unauthenticated administrator takeover across four AD360-integrated ManageEngine products. Exploitation is targeted and timing-dependent, but the impact is critical.