CVE-2026-75791

Summary

This vulnerability allows attackers to bypass authentication in the REST API of Zohocorp ManageEngine ADSelfService Plus versions before build 7001, enabling unauthorized access to sensitive features.

Exploitability

Exploitation is relatively straightforward as it requires access to the REST API, which may be exposed to the internet or internal network.

Blast radius

If exploited, this vulnerability could lead to unauthorized access to critical system functions, potentially allowing full control over the affected system.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to build 7001 or later.

Analysis generated locally by qwen2.5:7b-instruct (no data left the box). AI-assisted — verify against primary sources before acting.