Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
10.0

ManageEngine ADAudit Plus Unauthenticated Remote Code Execution

CVE-2026-6516 · published 3 months ago
Summary

ManageEngine ADAudit Plus versions before 8606 are vulnerable to unauthorized access and code execution. This means that an attacker could potentially take control of your system and access sensitive data. It's recommended to update to the latest version (8606 or later) to fix this issue.

What to do
  • Update zohocorp manageengine adaudit plus to version 8606 or later.
Affected software
VendorProductAffected versions
zohocorp manageengine adaudit plus < 8606
Original advisory text
Zohocorp ManageEngine ADAudit Plus versions before 8606 are affected by Unauthenticated Remote code execution due to the vulnerable agent API.
Zohocorp ManageEngine ADAudit Plus versions before 8606 are affected by Unauthenticated Remote code execution due to the vulnerable agent API.
References
Fix within
Internet-facing 3 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically
  • Gives an attacker full control
Severity
10.0 Critical
Exploitation
5% chance of attack within 30 days
Type
CWE-78OS Command Injection
Timeline
Published23 Jul 2026
Updated25 Oct 2026
First seen23 Jul 2026
Sources
CVE-2026-6516 · NVD
CVE-2026-6516 · MITRE
Track software like this
Free during beta