ADSelfService Plus

Critical ManageEngine ADSelfService Plus Vulnerability Fixed Diagram of the ManageEngine ADSelfService Plus vulnerability affecting the GINA client

Diagram of the ManageEngine ADSelfService Plus vulnerability affecting the GINA client

Critical ManageEngine ADSelfService Plus Vulnerability Fixed

Do Son September 22, 2026

TL;DR Zoho Corporation patched a critical ManageEngine ADSelfService Plus vulnerability affecting the GINA client. This flaw allows...

Zoho Patches Critical “9.1” Flaw in ADSelfService Plus CVE-2025-1723 ManageEngine Vulnerability CVE-2025-11250

CVE-2025-1723 ManageEngine Vulnerability CVE-2025-11250

Zoho Patches Critical “9.1” Flaw in ADSelfService Plus

Do Son January 15, 2026

ManageEngine has issued a critical security alert for ADSelfService Plus, its widely used self-service password management and...

CVE-2025-1723: Zoho Patches Account Takeover Vulnerability in ADSelfService Plus CVE-2025-1723 ManageEngine Vulnerability CVE-2025-11250

CVE-2025-1723 ManageEngine Vulnerability CVE-2025-11250

CVE-2025-1723: Zoho Patches Account Takeover Vulnerability in ADSelfService Plus

Do Son March 4, 2025

Zoho Corporation has released a security advisory addressing a critical account takeover vulnerability in its ADSelfService Plus...

📈

EPSS Spike Alerts
Catch risk spikes before they make headlines.

🎯

Custom EPSS/CVSS
Set score thresholds to effectively filter noise.

🛡️

Exploit Intel
Real-world exploit signals beyond the KEV catalog.

🐙

GitHub Issues
Auto-create alert tickets without duplication.

📬

Weekly Digest
Clean summaries, eliminating email spam.

🏷️

Watchlist Groups
Tag vulnerabilities by team (Infra/AppSec/SOC).

🔀

Smart Routing
Route chat channels based on severity levels.

🚨

RBP Tracker
Early warning detection and tracking system.

or try free for 14 days →

CVE-2026-88779CVSS 8.7
Vulnerability in NetScaler ADC and NetScaler Gateway. This issue affects ADC: before 14.1-73.41, before 13.1-64.28, before 14.1-73.41 FIPS,...
Admin intelCISA KEV📅 Added to KEV: Oct 4, 2026📅 Updated: Oct 4, 2026
CVE-2026-102490CVSS 8.5
All versions of Zammad including the latest alpha enable the local zammad user to escalate privileges to root.
Admin intelCISA KEV📅 Added to KEV: Oct 2, 2026📅 Updated: Oct 2, 2026
CVE-2026-102489CVSS 8.7
Zammad versions 6.3.0 to 6.5.4 are vulnerable a session hijack vulnerability that leads to remote code execution as...
Admin intelCISA KEV📅 Added to KEV: Oct 2, 2026📅 Updated: Oct 2, 2026
CVE-2026-100382CVSS 10.0
Improper Neutralization of Special Elements used in an OS Command (\'OS Command Injection\') vulnerability in Wikimedia Foundation Mediawiki...
Admin intel📅 Updated: Oct 1, 2026
CVE-2026-104286CVSS 9.8
An improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiMail 8.0.0 through...
CISA KEV📅 Added to KEV: Oct 1, 2026
CVE-2026-76504CVSS 9.8
A vulnerability in the API session-based authentication management of Cisco Catalyst SD-WAN Manager could allow an unauthenticated, remote...
Admin intelCISA KEV📅 Added to KEV: Sep 30, 2026📅 Updated: Sep 30, 2026
CVE-2026-86950CVSS 8.8
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7.1 and...
Admin intelCISA KEV📅 Added to KEV: Sep 29, 2026📅 Updated: Sep 29, 2026
CVE-2026-88772
Memory overflow vulnerability leading to remote code execution or denial of service.
Admin intelCISA KEV📅 Added to KEV: Sep 27, 2026📅 Updated: Sep 27, 2026

CVE-2026-56662CVSS 9.6
GetSimple CMS is a content management system (CMS), and GetSimple CMS CE is the community edition of that...
📅 Updated: Oct 6, 2026
CVE-2026-51922CVSS 9.8
agentscope v1.0.20 contains code injection in execute_shell_command (src/agentscope/tool/_coding/_shell.py). Depending on the exposed entry, an attacker can trigger attacker-controlled...
📅 Updated: Oct 6, 2026
CVE-2026-51915CVSS 9.8
TransformerOptimus SuperAGI v0.0.14 is vulnerable to Incorrect Access Control in the tool controller. In affected source snapshots, get_tool...
📅 Updated: Oct 6, 2026
CVE-2026-51898CVSS 9.8
sinaptik-ai pandas-ai 3.0.0 is vulnerable to Code Injection in CodeExecutor.execute.
📅 Updated: Oct 6, 2026
CVE-2026-51906CVSS 9.1
In TaskingAI v0.3.0 in the DALL-E 3 image generation tool save_url_image function, a path traversal vulnerability allows attackers...
📅 Updated: Oct 6, 2026
CVE-2026-96659CVSS 9.1
A flaw was found in Foreman. This vulnerability allows an authenticated user with low-level Viewer permissions to cause...
📅 Updated: Oct 6, 2026
CVE-2026-51886CVSS 9.8
langflow-ai langflow v1.9.3 is affected by: Code Injection. The impact is: execute arbitrary code (remote). The component is:...
📅 Updated: Oct 6, 2026
CVE-2026-51881CVSS 9.8
deeptutor 1.4.0 contains code injection in ExecTool.execute. Through the live tutorbot WebSocket interface, a remote caller can induce...
📅 Updated: Oct 6, 2026