CVE-2026-11374CWE-287CWE-330CWE-340

Account Takeover via Predictable SSO Ticket Generation

Critical · published June 23, 2026

CVSS v3.1
9.0
EPSS
3%
Percentile
84.7
In the wild
Unconfirmed
What it is

In ManageEngine ADSelfService Plus, RecoveryManager Plus, M365 Manager Plus, and ADAudit Plus, the SSO tickets generated to authenticate that session could be predicted

by an unauthenticated user, leading to account takeover.

The record
Technical detail
CVSS v3.1
9.0 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.02523 · 84.7th percentile
Weaknesses
CWE-287 · Improper Authentication; CWE-330 · Use of Insufficiently Random Values; CWE-340 · Generation of Predictable Numbers or Identifiers
Published
2026-06-23T08:19Z
EPSS history
Timeline
  • 23 JUN 08:19Z
    Account Takeover via Predictable SSO Ticket Generation
    cvelistv5