A vulnerability has been found in Zoho ManageEngine Analytics Plus up to 6171 and classified as critical. This impacts an unknown function of the component Key Update API. The manipulation leads to sql injection.

This vulnerability is traded as CVE-2025-9428. It is possible to initiate the attack remotely. There is no exploit available.