CVE-2021-44526: Zohocorp ManageEngine ServiceDesk Plus

Critical severity, CVSS 9.8. EPSS: 3.2% chance of exploitation in the next 30 days.

Zoho ManageEngine ServiceDesk Plus before 12003 allows authentication bypass in certain admin configurations.

Affected products

• Zohocorp ManageEngine ServiceDesk Plus: version 8.1 only; version 8.2 only; version 9.0 only; version 9.1 only; version 9.2 only; version 9.3 only; …

Published 2021-12-23. Last modified 2026-06-17.