CVE-2026-76981

Authenticated Second-Order SQL Injection

high · 8.8

Fix listed

Zoho ADAudit Plus

Published Nov 11, 2026, 07:29 UTC

Description

Zoho Corporation ManageEngine ADAudit Plus versions below 8711 are vulnerable to an authenticated second order SQL injection vulnerability affecting ADAudit Plus custom reports module.

Reported fixed versions

8711

Official CVE record Read Eden case study View source and advisories

Data from cve.now. Summaries, where shown, are licensed CC BY 4.0.