CVE-2026-11374 – Account Takeover via Predictable SSO Ticket Generation

CVE ID :CVE-2026-11374

Published : June 23, 2026, 8:19 a.m. | 1 hour, 24 minutes ago

Description :In ManageEngine ADSelfService Plus, RecoveryManager Plus, M365 Manager Plus, and ADAudit Plus, the SSO tickets generated to authenticate that session could be predicted
by an unauthenticated user, leading to account takeover.

Severity: 9.0 | CRITICAL

Visit the link for more details, such as CVSS details, affected products, timeline, and more…