CVE-2026-12062

Zoho ADAudit Plus authenticated SQL injection in Reports API

high · 8.8

Fix listed

Zoho ADAudit Plus

Published Nov 11, 2026, 07:38 UTC

Description

Zoho Corporation ManageEngine ADAudit Plus versions below 8703 are vulnerable to an authenticated SQL injection vulnerability in ADAudit Plus Reports API.

Reported fixed versions

8703

Official CVE record Read Eden case study View source and advisories

Data from cve.now. Summaries, where shown, are licensed CC BY 4.0.