CVE-2026-6516

CriticalCVSS 10.0

Published: 23/07/2026(UTC)Updated: 24/07/2026(UTC)Translated: 24/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Very high risk

4.73%

91th percentile - higher than 91% of all known CVEs

Zohocorp ManageEngine ADAudit Plus versions before 8606 are affected by unauthenticated remote code execution due to a vulnerable agent API.

An attacker can remotely execute arbitrary code on the ADAudit Plus server, leading to full compromise of audit data and infrastructure.

Update ManageEngine ADAudit Plus to version 8606 or later.

Original NVD description (English source)

Zohocorp ManageEngine ADAudit Plus versions before 8606 are affected by Unauthenticated Remote code execution due to the vulnerable agent API.