CVE-2026-11374

CVE

Threat entity extracted from intelligence sources

Frequency

occurrences

First Seen

June 24, 2026

Last Seen

June 25, 2026

API

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Critical SSO Vulnerability in ManageEngine Allows Account Takeover72.6

Zoho Corp. ManageEngine has disclosed a critical vulnerability tracked as CVE-2026-11374, affecting several of its products when integrated with AD360. The flaw allows attackers to predict single sign-on (SSO) tokens, potentially leading to account takeover and exposure of sensitive user information...

Public Exploits

Checking GitHub for proof-of-concept code…

Related Clusters (1)

Critical SSO Vulnerability in ManageEngine Allows Account Takeover

Jun 25·3 sources

Related Entities

Sql Injection Account Takeover ManageEngine CWE-287 - Improper Authentication CWE-89 - SQL Injection T1190 - Exploit Public-Facing Application Ad360 ADSelfService Plus M365 Manager Plus RecoveryManager Plus

CVE-2026-11374

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Public Exploits

CVE Details

Related Clusters (1)

Critical SSO Vulnerability in ManageEngine Allows Account Takeover

Related Articles (3)

ManageEngine AD360 Integrated Products Hit by Account Takeover Vulnerability

ManageEngine AD360 Integration Flaw Exposes User Identity and Role Information to Attackers

Zoho Corp. ManageEngine: Critical SSO vulnerability allows account takeover

Related Entities