Remote Code Execution Vulnerability in ManageEngine ADSelfService Plus by Zohocorp

CVE-2026-74849

What is CVE-2026-74849?

CVE-2026-74849 is a significant remote code execution vulnerability found in ManageEngine ADSelfService Plus, a software solution designed by Zohocorp that enables users to manage and reset their passwords securely. This vulnerability affects versions of the software prior to build 7001 and is rooted in the GINA client component, which plays a critical role in the system's authentication process. If exploited, this vulnerability could allow malicious actors to execute arbitrary code on the affected systems, leading to unauthorized access and control over organizational resources. The impact of such exploitation could be severe, potentially disrupting normal operations, leading to data integrity issues, and exposing sensitive information.

Potential Impact of CVE-2026-74849

1. Unauthorized Access: Exploitation of this vulnerability could provide attackers with the ability to manipulate user sessions or gain elevated privileges, bypassing security measures meant to protect sensitive data and functions within the organization.

2. Data Breach Threats: With remote code execution capabilities, attackers could access confidential information, leading to potential data exfiltration. This could have devastating consequences for organizations, including financial loss, reputational damage, and regulatory penalties.

3. Operational Disruption: The ability to execute arbitrary code may facilitate a range of malicious activities, including the deployment of ransomware or other malware, resulting in significant downtime, loss of productivity, and costly recovery efforts.

References