CVE-2026-11374: ManageEngine SSO Ticket Prediction Enables Unauthenticated Account Takeover
ID: d6745778-eb0d-5d51-aecd-922b410facc9
STIX ID: report--d6745778-eb0d-5d51-aecd-922b410facc9
Feed Name: CosmicBytez Labs
Threat Score
A critical authentication vulnerability (CVE-2026-11374, CVSS 3.1 score 9.0) in ManageEngine ADSelfService Plus, RecoveryManager Plus, M365 Manager Plus, and ADAudit Plus allows unauthenticated attackers to predict SSO session tickets and impersonate any user including administrators; patches (builds 6529, 6321, 4817, 8703) are available and should be applied immediately. The report outlines the attack steps, potential AD and M365 impacts, detection guidance, and network/hardening recommendations.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.