anonhaven

CVE-2026-6516

CRITICAL CVSS 3.1: 10.0 EPSS 4.73%
Updated Jul 24, 2026
Zohocorp
Parameter Value
CVSS 10.0 (CRITICAL)
Affected Versions before 8606
Type CWE-78 (OS Command Injection)
Vendor Zohocorp
Public PoC No

Zohocorp ManageEngine ADAudit Plus versions before 8606 are affected by Unauthenticated Remote code execution due to the vulnerable agent API.

Attack Parameters

Attack Vector
Network
Can be exploited remotely
Attack Complexity
Low
Easy to exploit
Privileges Required
None
No privileges needed
User Interaction
None
No user interaction needed

Impact Assessment

Confidentiality
High
Complete data leak
Integrity
High
Complete data modification
Availability
Low
Partial disruption

CVSS Vector v3.1

Weakness Type (CWE)

CWE-78 OS Command Injection

References 1

https://www.manageengine.com/products/active-directory-audit/cve-2026-6516.html
0fc0942c-577d-436f-ae8e-945763c79b02
Share Post Share Share Share