Zohocorp Manageengine M365 Manager Plus vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Zohocorp Manageengine M365 Manager Plus: 2 record(s), with affected versions and fixes.
CVE-2026-16053
High · 8.5
CWE-23 Aug 11, 2026
Path Traversal
Zohocorp ManageEngine M365 Manager Plus and M365 Security Plus versions below 4820 are affected to Authenticated Path Traversal vulnerability in Exchange Online backup module.
CVE-2026-11374
Critical · 9.0
CWE-287 Jun 23, 2026
ManageEngine ADSelfService Plus, RecoveryManager Plus, M365 Manager Plus and ADAudit Plus: predictable SSO ticket leading to account takeover (CVE-2026-11374)
In ManageEngine ADSelfService Plus, RecoveryManager Plus, M365 Manager Plus, and ADAudit Plus, the SSO tickets generated to authenticate that session could be predicted
by an unauthenticated user, leading to account takeover.