Zoho ManageEngine ADManager Plus version 7110 and prior allows unrestricted file upload which leads to remote code execution.
Published October 7, 2021.
Zohocorp Manageengine Admanager Plus