CVE-2025-11250
Critical · 9.1CVSS
9.1
EPSS
1.6%
Published
Jan 13, 2026
CISA due date
—
The record
Zohocorp ManageEngine ADSelfService Plus versions before 6519 are vulnerable to Authentication Bypass due to improper filter configurations.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|