Account Takeover via Predictable SSO Ticket Generation_CVE-2026-11374

9 / 10

CRITICAL

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H

Description

In ManageEngine ADSelfService Plus, RecoveryManager Plus, M365 Manager Plus, and ADAudit Plus, the SSO tickets generated to authenticate that session could be predicted
by an unauthenticated user, leading to account takeover.

AI Analysis

Predictable SSO ticket generation vulnerability allowing account takeover

Basic Information

ID CVE-2026-11374

Source Zohocorp

Published Jun 23, 2026 at 08:19

Affected Product

Vendor zohocorp

Product manageengine_adselfservice_plus

Affected Versions zohocorp manageengine_adselfservice_plus 0
zohocorp manageengine_recovery_manager_plus 0
zohocorp manageengine_m365_manager_plus 0
zohocorp manageengine_adaudit_plus 0

CWE Classification

CWE-340 CWE-330 CWE-287

AI Assessment

AI Score 9 / 10

AI Severity Critical

Vendor Zoho Corp

Product ManageEngine ADSelfService Plus, RecoveryManager Plus, M365 Manager Plus, ADAudit Plus

References

www.manageengine.com /products/self-service-password/advisory/CVE-2026-11374.html

{
    "lastseen": "",
    "description": "In ManageEngine ADSelfService Plus, RecoveryManager Plus, M365 Manager Plus, and ADAudit Plus, the SSO tickets generated to authenticate that session could be predicted\n by an unauthenticated user, leading to account takeover.",
    "published": "2026-06-23T08:19:30.638Z",
    "modified": "2026-06-23T08:19:30.638Z",
    "type": "cve",
    "title": "Account Takeover via Predictable SSO Ticket Generation",
    "source": "Zohocorp",
    "references": "https://www.manageengine.com/products/self-service-password/advisory/CVE-2026-11374.html",
    "id": "CVE-2026-11374",
    "bulletinFamily": "",
    "cwe": [
        "CWE-340",
        "CWE-330",
        "CWE-287"
    ],
    "cvelist": null,
    "sourceData": "zohocorp manageengine_adselfservice_plus 0\nzohocorp manageengine_recovery_manager_plus 0\nzohocorp manageengine_m365_manager_plus 0\nzohocorp manageengine_adaudit_plus 0",
    "sourceHref": "",
    "cvss": {
        "score": 9,
        "severity": "CRITICAL",
        "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H",
        "version": "3.1"
    },
    "cvss2": [],
    "cvss3": {
        "version": "",
        "vectorString": "",
        "baseScore": 0,
        "baseSeverity": "",
        "attackVector": "",
        "attackComplexity": "",
        "privilegesRequired": "",
        "userInteraction": "",
        "scope": "",
        "confidentialityImpact": "",
        "integrityImpact": "",
        "availabilityImpact": "",
        "cvssV3": {
            "version": "",
            "vectorString": "",
            "baseScore": 0,
            "baseSeverity": "",
            "attackVector": "",
            "attackComplexity": "",
            "privilegesRequired": "",
            "userInteraction": "",
            "scope": "",
            "confidentialityImpact": "",
            "integrityImpact": "",
            "availabilityImpact": ""
        }
    },
    "href": "",
    "category_name": "CVE",
    "post_link": "",
    "product": "manageengine_adselfservice_plus",
    "version": "0",
    "vendor": "zohocorp",
    "ai_description": "Predictable SSO ticket generation vulnerability allowing account takeover",
    "ai_severity": "Critical",
    "ai_vendor": "Zoho Corp",
    "ai_product": "ManageEngine ADSelfService Plus, RecoveryManager Plus, M365 Manager Plus, ADAudit Plus",
    "ai_version": "0",
    "ai_score": 9
}