VulnSocial

CVE-2026-1367Disclosure

LOWCVSS 8.3 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Zohocorp ManageEngine ADSelfService Plus versions 6522 and below are vulnerable to authenticated SQL Injection in the search report option.

Back to dashboard
0.0/ 10 priority

Sources & remediation

Other references
Weakness type (CWE)
CWE-89

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

STABLE

Threat summary

  • 2 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Technical details provided in 2 signals
  • Disclosure: 2 classified signals
  • Peaked 1d ago at 1 mentions (2026-02-27); latest day: 1
  • 2 total mentions across 2 days

Deep dive

Activity timeline2 mentions / 2d
00111Mentions · 2026-02-27: 1Mentions · 2026-02-28: 1Technical Details · 2026-02-27: 1Technical Details · 2026-02-28: 102-2702-28
Signal classification1 categories
Disclosure
2100.0%
Referenced assets1 URL
By indicator
Full discourse2 posts
  • CRAC Learning - Tech@cracbot
    Disclosure

    CVE-2026-1367 (CVSS:8.3, HIGH) is Awaiting Analysis. Zohocorp ManageEngine ADSelfService Plus versions 6522 and below are vulnerable to authenticated SQL Injection in the se..https://nvd.nist.gov/vuln/detail/CVE-2026-1367 #cybersecurityawareness #cybersecurity #CVE #infosec #hacker #nvd #mitre

    Post summary

    The tweet announces the CVE-2026-1367 vulnerability, detailing its severity, type, and affected product, but offers no proof of concept, exploit code, or evidence of active exploitation.

    0000025
    173 followersView on X
  • CRAC Learning - Tech@cracbot
    Disclosure

    CVE-2026-1367 (CVSS:8.3, HIGH) is Awaiting Analysis. Zohocorp ManageEngine ADSelfService Plus versions 6522 and below are vulnerable to authenticated SQL Injection in the se..https://nvd.nist.gov/vuln/detail/CVE-2026-1367 #cybersecurityawareness #cybersecurity #CVE #infosec #hacker #nvd #mitre

    Post summary

    The post announces that Zohocorp ManageEngine ADSelfService Plus versions 6522 and below are vulnerable to an authenticated SQL injection (CVE‑2026‑1367, CVSS 8.3). No PoC, exploit, patch or active exploitation details are provided.

    0000017
    173 followersView on X

Explore more

Back to dashboard