CVE-2026-76981: Authenticated Second-Order SQL Injection
Zoho Corporation ManageEngine ADAudit Plus versions below 8711 are vulnerable to an authenticated second order SQL injection vulnerability affecting ADAudit Plus custom reports module.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Zoho ManageEngine ADAudit Plusto a version that resolves this vulnerability.Fixed in 8711
Event History
Frequently Asked Questions
Which deployments are affected?
Zoho ManageEngine ADAudit Plus deployments running a version below 8711 are affected, specifically in the custom reports module.
What level of access does an attacker need?
Exploitation requires an authenticated account with the ability to interact with the ADAudit Plus custom reports module. No user interaction is required after the attacker has the necessary access.
What is the impact of successful exploitation?
The vulnerability is rated high with a CVSS vector indicating high impact to confidentiality, integrity, and availability. It is a second-order SQL injection, meaning attacker-controlled data may be stored and later used in a database query.