CVE-2026-1367: Zohocorp ManageEngine Adselfservice Plus

High severity, CVSS 8.3. EPSS: 7.7% chance of exploitation in the next 30 days.

Zohocorp ManageEngine ADSelfService Plus versions 6522 and below are vulnerable to authenticated SQL Injection in the search report option.

Affected products

• Zohocorp ManageEngine Adselfservice Plus: before 6523 (fixed in 6523)

Published 2026-02-23. Last modified 2026-06-17.