VDB

GCVE-110-NCSC-2026-263

GCVE-110-NCSC-2026-263
Advisory PublishedCVSS 10.0/10
Vulnetix · Advisory published July 24, 2026
Zohocorp ManageEngine ADAudit Plus versions prior to 8606 contain a critical unauthenticated remote code execution vulnerability in the agent API.
Download JSON Open in Console

Weaknesses (CWE)

CWE-78Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

Risk Scores

CVSS 3.1
10.0/10
Critical · CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:L

Affected Products

VendorProductVersionsPlatforms
Zohocorpvers:unknown/*——

Aliases

CVE-2026-6516

References

advisory
advisory
advisory

Browse GCVE Records

77,886 records in the GCVE database · Updated August 8, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON
$ Console Community · 100/wk Open console ›