CVE-2026-74849

Critical9.8 Published on Sep 22, 2026

Zohocorp ManageEngine ADSelfService Plus versions before build 7001 are vulnerable to a remote code execution vulnerability in the GINA client.

CVSS score9.8 / 10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness type (CWE)CWE-78

FortiMail and NetScaler Exploitation Drives an Urgent Enterprise Patch Cycle

FortiMail path traversal and NetScaler SAML flaw under active exploit join CISA KEV, forcing urgent patching plus PHP, PaperCut and Spectre fixes.

This product uses the NVD API but is not endorsed or certified by the NVD.