RCE in Zohocorp Manageengine Adaudit Plus
CVE-2026-6516
Zohocorp ManageEngine ADAudit Plus versions before 8606 are affected by Unauthenticated Remote code execution due to the vulnerable agent API.
Vulnerability class: Command Injection (OS Command Injection)
Published · last modified .
CVSS v3 metric
CVSS v3 base score 10.0 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:L.
EPSS exploit prediction
EPSS 0.047, 91.9th percentile (scored ); unchanged over 30 days. About EPSS.
Affected products
- Zohocorp Manageengine Adaudit Plus — versions 0
Weakness classification (CWE)
Public exploits and proof-of-concept code
1 public repository with exploit or proof-of-concept code for this CVE:
- t3chn0t3s-org/cve-2026-6516-scanner (last pushed 2026-10-30): Find ADAudit Plus web servers in nmap output and triage CVE-2026-6516 (pre-auth RCE) in a single dependency-free Python file.
References
This CVE has public exploit evidence. See the latest CVEs with public exploits.