Zohocorp ManageEngine ADSelfService Plus versions before build 7001 are vulnerable to a remote code execution vulnerability in the GINA client.

Critical CVSS 9.8

CVECVE-2026-74849

First seen2026-09-22 12:31 UTC

Disclosed2026-09-22 12:17 UTC

Last updated2026-09-22 12:31 UTC

Channel statusauto

Summary

Zohocorp ManageEngine ADSelfService Plus versions before build 7001 are vulnerable to a remote code execution vulnerability in the GINA client.

No in-depth report has been generated yet (DR-003 v2 AI pipeline is under construction).