ADAudit Plus - CraftedSignal Threat Feedhttps://feed.craftedsignal.io/products/adaudit-plus/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioFri, 30 Oct 2026 21:03:15 +0000https://feed.craftedsignal.io/favicon-32x32.pngCraftedSignal Threat Feedhttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svgManageEngine ADAudit Plus: Pre-authentication remote code execution (CVE-2026-6516)https://feed.craftedsignal.io/briefs/2026-10-adaudit-rce/Fri, 30 Oct 2026 21:03:15 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-10-adaudit-rce/A public exploit and scanner have been published for CVE-2026-6516, a pre-authentication remote code execution vulnerability in ManageEngine ADAudit Plus Agent APIs.<p>CVE-2026-6516 is a pre-authentication remote code execution vulnerability in the Agent APIs of ManageEngine ADAudit Plus. The vulnerability involves authentication bypass and path traversal, potentially allowing an unauthenticated attacker to write files outside of the intended directory. The vulnerability is reported with a CVSS v3.1 base score of 10.0. A public scanner is available to identify Agent API endpoints that are reachable without authentication.</p> highadvisory