Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 01:28:52 +0000 CVE-2026-11374 — Account Takeover via Predictable SSO Ticket Generation https://cve.radiocsirt.org/vuln/cve-2026-11374 <p><strong>Affected:</strong> zohocorp manageengine_adselfservice_plus, zohocorp manageengine_recovery_manager_plus, zohocorp manageengine_m365_manager_plus, zohocorp manageengine_adaudit_plus</p> <p>In ManageEngine ADSelfService Plus, RecoveryManager Plus, M365 Manager Plus, and ADAudit Plus, the SSO tickets generated to authenticate that session could be predicted by an unauthenticated user, leading to account takeover.</p> <p><strong>Affected:</strong> zohocorp manageengine_adselfservice_plus, zohocorp manageengine_recovery_manager_plus, zohocorp manageengine_m365_manager_plus, zohocorp manageengine_adaudit_plus</p> <p>In ManageEngine ADSelfService Plus, RecoveryManager Plus, M365 Manager Plus, and ADAudit Plus, the SSO tickets generated to authenticate that session could be predicted by an unauthenticated user, leading to account takeover.</p> https://cve.radiocsirt.org/vuln/cve-2026-11374