CVE 8.4 HIGH

Remote Code Execution_CVE-2026-2740

8.4 / 10
HIGH
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:L

Description

Zohocorp ManageEngine ADSelfService Plus version before 6525, DataSecurity Plus before 6264 and RecoveryManager Plus before 6313 are vulnerable to Authenticated Remote code execution in the agent machines due to the bug in the 3rd party dependency.

Basic Information

ID CVE-2026-2740
Source Zohocorp
Published May 21, 2026 at 12:36

Affected Product

Vendor Zohocorp
Product ManageEngine ADSelfService Plus
Affected Versions Zohocorp ManageEngine ADSelfService Plus 0
Zohocorp ManageEngine DataSecurity Plus 0
Zohocorp ManageEngine RecoveryManager Plus 0

CWE Classification

References

💭 Join the Security Discussion

🔒 Your email address will not be published. Required fields are marked *

⚠️ Please be respectful and constructive in your comments. Security discussions should remain professional.