CVE-2026-11374
CRITICAL
NVD
CVSS Score
9
Severity
CRITICAL
Published
Jun 23, 2026
Vendor
unknown
Description
In ManageEngine ADSelfService Plus, RecoveryManager Plus, M365 Manager Plus, and ADAudit Plus, the SSO tickets generated to authenticate that session could be predicted by an unauthenticated user, leading to account takeover.