{"vulnerability": "CVE-2026-11374", "sightings": [{"uuid": "a8c5c901-c1f2-46c9-a289-66bf469070ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-11374", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mox6zvolwn2f", "content": "Zoho ManageEngine ADSelfService Plus faces CRITICAL CVE-2026-11374: predictable SSO tickets let attackers hijack accounts. No patch \u2014 monitor vendor updates and restrict access. https://radar.offseq.com/threat/cve-2026-11374-cwe-340-generation-of-predictable-n-3400726b0246539c #OffSeq #Zoho #SSO", "creation_timestamp": "2026-06-23T10:30:35.844123Z"}, {"uuid": "a248eeb5-a98f-465c-b87f-80494043795d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-11374", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116798955994793705", "content": "Zoho ManageEngine ADSelfService Plus hit by CRITICAL CVE-2026-11374: predictable SSO tickets enable unauthenticated account takeover. No patch yet \u2014 monitor advisories and review exposure. https://radar.offseq.com/threat/cve-2026-11374-cwe-340-generation-of-predictable-n-3400726b0246539c #OffSeq #Zoho #Vuln #SSO #Infosec", "creation_timestamp": "2026-06-23T10:30:36.922945Z"}, {"uuid": "a42cd323-f3de-4990-8b79-8008434b5d96", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11374", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3moxbkdgb2s2j", "content": "CVE-2026-11374 - Account Takeover via Predictable SSO Ticket Generation\nCVE ID : CVE-2026-11374\n \n Published : 23 juin 2026 08:19 | 1\u00a0heure, 23\u00a0minutes ago\n \n Description : In ManageEngine ADSelfService Plus, RecoveryManager Plus, M365 Manager Plus, and ADAudit Plus, the SSO t...", "creation_timestamp": "2026-06-23T11:15:33.375690Z"}, {"uuid": "84033b7a-b17f-44a7-b822-0825637b0573", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11374", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/116804624818581404", "content": "A lot of offensive activities were identified targeting Zoho ManageEngine ADSelfService Plus and other products (CVE-2026-11374) https://vuldb.com/vuln/372876/cti", "creation_timestamp": "2026-06-24T10:32:12.577287Z"}, {"uuid": "e6d7f9b5-6c55-47e1-ae17-a8f03d2cc559", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11374", "type": "seen", "source": "https://bsky.app/profile/undercodenews.bsky.social/post/3mp4dmpv6ch2c", "content": "CVE-2026-11374: Critical AD360 SSO Flaw Lets Attackers Predict Login Tickets and Take Over Enterprise Accounts +\u00a0Video\n\n\ud83e\udde8 Introduction: A Silent Identity Crisis Inside Enterprise Access Systems A newly disclosed high-severity vulnerability, CVE-2026-11374, has sent shockwaves through enterprise\u2026", "creation_timestamp": "2026-06-25T11:35:59.900879Z"}, {"uuid": "ef16a8d0-1fc1-4916-b40a-5316baecd9e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11374", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3mp4jjvhv7ji2", "content": "ManageEngine AD360 Integration Flaw Exposes User Identity and Role Information to Attackers ManageEngine has disclosed a high-severity vulnerability, tracked as CVE-2026-11374, affecting several of...\n\n#Cyber #Security #News #Vulnerability #News #cyber [\u2026] \n\n[Original post on cybersecuritynews.com]", "creation_timestamp": "2026-06-25T13:23:26.492856Z"}, {"uuid": "4cbcc1b9-2b03-46b0-8ab8-4bb88d22f89f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11374", "type": "seen", "source": "https://bsky.app/profile/undercode.bsky.social/post/3mp5m7w6jmf2g", "content": "ManageEngine AD360 SSO Token Prediction Flaw \u2013 CVE-2026-11374: Critical Account Takeover Vulnerability Exposes Enterprise Identity Infrastructure +\u00a0Video\n\nIntroduction: A critical security vulnerability identified as CVE-2026-11374 has been disclosed in ManageEngine's AD360 identity and access\u2026", "creation_timestamp": "2026-06-25T23:42:33.744828Z"}, {"uuid": "4967b1a7-fb2f-4054-8d86-24d3b5e60727", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11374", "type": "seen", "source": "https://bsky.app/profile/newsarea.bsky.social/post/3mp5n3ziczq27", "content": "ManageEngine AD360 Integration Flaw Exposes User Identity and Role Information to\u00a0Attackers\n\nManageEngine has disclosed a high-severity vulnerability, tracked as CVE-2026-11374, affecting several of its identity and access management solutions when integrated with AD360. The flaw could allow\u2026", "creation_timestamp": "2026-06-25T23:58:17.224266Z"}, {"uuid": "7d21c00f-a9d4-43a3-961c-28423a31c5c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11374", "type": "seen", "source": "https://bsky.app/profile/r-blueteamsec.bsky.social/post/3mpfp3qxla52y", "content": "CVE-2026-11374: Account takeover vulnerability in ADSelfService Plus, RecoveryManager Plus, M365 Manager Plus, and ADAudit Plus", "creation_timestamp": "2026-06-29T04:55:12.496902Z"}, {"uuid": "b5e76912-2a69-4542-b089-6963923f12c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11374", "type": "seen", "source": "https://infosec.exchange/users/threatcodex/statuses/116833787223899004", "content": "CVE-2026-11374: Account takeover vulnerability in ADSelfService Plus, RecoveryManager Plus, M365 Manager Plus, and ADAudit Plus#CVE_2026_11374 #ManageEngine https://www.manageengine.com/products/self-service-password/advisory/CVE-2026-11374.html", "creation_timestamp": "2026-06-29T14:08:35.118827Z"}, {"uuid": "4b61f91c-a24a-4fdb-a6cf-835741518ff1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11374", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mr2h7jvzlk2z", "content": "\u300cManageEngine\u300d\u306e\u8907\u6570\u88fd\u54c1\u3067\u30a2\u30ab\u30a6\u30f3\u30c8\u4e57\u3063\u53d6\u308a\u306e\u304a\u305d\u308c\n\nZoho\u304c\u63d0\u4f9b\u3059\u308b\u300cManageEngine\u300d\u306e\u8907\u6570\u88fd\u54c1\u306b\u304a\u3044\u3066\u8a8d\u8a3c\u56de\u907f\u306e\u8106\u5f31\u6027\u304c\u660e\u3089\u304b\u3068\u306a\u3063\u305f\u30026\u6708\u524d\u534a\u306b\u516c\u958b\u3055\u308c\u305f\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u3067\u4fee\u6b63\u6e08\u307f\u3060\u3068\u3044\u3046\u3002\n\n\u30e6\u30fc\u30b6\u30fc\u306eID\u3084\u30ed\u30fc\u30eb\u60c5\u5831\u3092\u7b2c\u4e09\u8005\u306b\u53d6\u5f97\u3055\u308c\u3001\u6700\u7d42\u7684\u306b\u30a2\u30ab\u30a6\u30f3\u30c8\u3092\u4e57\u3063\u53d6\u3089\u308c\u308b\u304a\u305d\u308c\u304c\u3042\u308b\u8106\u5f31\u6027\u300cCVE-2026-11374\u300d\u304c\u660e\u3089\u304b\u3068\u306a\u3063\u305f\u3082\u306e\u3002\u540c\u793e\u306e\u30d0\u30b0\u30d0\u30a6\u30f3\u30c6\u30a3\u30d7\u30ed\u30b0\u30e9\u30e0\u3092\u901a\u3058\u3066\u5831\u544a\u3092\u53d7\u3051\u305f\u3068\u3044\u3046\u3002\n\n\u300cManageEngine AD360\u300d\u306e\u7d71\u5408\u30b3\u30f3\u30dd\u30fc\u30cd\u30f3\u30c8\u3068\u3057\u3066\u5c0e\u5165\u3055\u308c\u3066\u3044\u308b\u300cADSelfService Plus\u300d\u300cRecoveryManager Pl...", "creation_timestamp": "2026-07-20T04:25:17.081255Z"}, {"uuid": "4f042c31-1256-4d66-aca1-a6b16817c7a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11374", "type": "seen", "source": "https://t.me/GithubRedTeam/94335", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-11374-check\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a BishopFox\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-20 15:53:14\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nDetection script for CVE-2026-11374\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-20T18:00:04.394192Z"}, {"uuid": "444a7e1d-cda2-4617-81a3-a2dc532ce23a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11374", "type": "seen", "source": "https://t.me/GithubRedTeam/94335", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-11374-check\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a BishopFox\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-20 15:53:14\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nDetection script for CVE-2026-11374\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-21T00:00:29.763515Z"}, {"uuid": "23e119b6-1443-4ff2-ae7a-06014e546091", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11374", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/94335", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-11374-check\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a BishopFox\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-20 15:53:14\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nDetection script for CVE-2026-11374\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-22T00:00:21.304614Z"}, {"uuid": "c046a49c-d3c8-4a7f-8863-0e763830e950", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11374", "type": "seen", "source": "Telegram/OHtlgQSf1ttAAdGsPBUI_8rerZBnCKre55WVBLaYQ6LwoQM", "content": "", "creation_timestamp": "2026-07-22T17:00:05.892541Z"}, {"uuid": "6e8d536e-4780-4bec-acf1-75f174485e6f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11374", "type": "seen", "source": "Telegram/pdM35Qb7UYxK7NyQH_YMiMTzKCL1s0zrYFTaLDzzfEjcX8M", "content": "", "creation_timestamp": "2026-07-22T17:00:06.069077Z"}, {"uuid": "729c782e-bd31-448a-af66-92bc7ec08beb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11374", "type": "published-proof-of-concept", "source": "Telegram/pdM35Qb7UYxK7NyQH_YMiMTzKCL1s0zrYFTaLDzzfEjcX8M", "content": "", "creation_timestamp": "2026-07-23T00:00:08.139639Z"}, {"uuid": "ff266f86-c949-4713-9f51-8c110d9a7ad1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11374", "type": "published-proof-of-concept", "source": "Telegram/OHtlgQSf1ttAAdGsPBUI_8rerZBnCKre55WVBLaYQ6LwoQM", "content": "", "creation_timestamp": "2026-07-23T00:00:08.454641Z"}, {"uuid": "df853169-c708-4a3e-b35f-35bb3382df36", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11374", "type": "seen", "source": "Telegram/C4S4kiMFaTlVqGYluXu3Q3rIfspzM51jNrRS_jFbE3SEGxs", "content": "", "creation_timestamp": "2026-07-23T04:00:05.401741Z"}, {"uuid": "ac2d5d55-ff1e-4762-8136-c85c062e3ad3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11374", "type": "published-proof-of-concept", "source": "Telegram/C4S4kiMFaTlVqGYluXu3Q3rIfspzM51jNrRS_jFbE3SEGxs", "content": "", "creation_timestamp": "2026-07-24T00:00:21.242136Z"}]}