CVE-2026-1367 | Zoho ManageEngine ADSelfService Plus up to 6522 Search Report sql injection

A vulnerability was found in Zoho ManageEngine ADSelfService Plus up to 6522 and classified as critical. This vulnerability affects unknown code of the component Search Report. Such manipulation leads to sql injection.

This vulnerability is uniquely identified as CVE-2026-1367. The attack can be launched remotely. No exploit exists.

It is suggested to upgrade the affected component.