CVE-2026-11374 - Vulnerability Details

Threat entity extracted from intelligence sources

Frequency

3

occurrences

First Seen

June 24, 2026

Last Seen

June 25, 2026

CVE-2026-11374 is a vulnerability tracked across 1 threat cluster and 3 intelligence report mentions on ThreatCluster. First observed June 24, 2026; most recent activity June 25, 2026.

Related Threat Clusters

Critical SSO Vulnerability in ManageEngine Allows Account Takeover
Zoho Corp. ManageEngine has disclosed a critical vulnerability tracked as CVE-2026-11374, affecting several of its products when integrated with AD360. The flaw allows attackers to predict single sign-on (SSO) tokens,…

3 articles · Updated June 25, 2026

Recent Intelligence Reports

ManageEngine AD360 Integrated Products Hit by Account Takeover Vulnerability — Gbhackers · June 25, 2026
ManageEngine AD360 Integration Flaw Exposes User Identity and Role Information to Attackers — Cybersecuritynews · June 25, 2026
Zoho Corp. ManageEngine: Critical SSO vulnerability allows account takeover — Heise.De · June 24, 2026

Related Entities

Account Takeover Sql Injection ManageEngine CWE-287 - Improper Authentication Cwe-89 - SQL Injection T1190 - Exploit Public-Facing Application Ad360 ADSelfService Plus M365 Manager Plus RecoveryManager Plus