{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/products/macos-agents/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":[],"_cs_cves":[{"cvss":10,"id":"CVE-2026-6516"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["ADAudit Plus","Windows Agents","macOS Agents"],"_cs_severities":["high"],"_cs_tags":[],"_cs_type":"advisory","_cs_vendors":["ManageEngine"],"content_html":"\u003cp\u003eCVE-2026-6516 is a pre-authentication remote code execution vulnerability in the Agent APIs of ManageEngine ADAudit Plus. The vulnerability involves authentication bypass and path traversal, potentially allowing an unauthenticated attacker to write files outside of the intended directory. The vulnerability is reported with a CVSS v3.1 base score of 10.0. A public scanner is available to identify Agent API endpoints that are reachable without authentication.\u003c/p\u003e\n","date_modified":"2026-10-30T21:03:15Z","date_published":"2026-10-30T21:03:15Z","id":"https://feed.craftedsignal.io/briefs/2026-10-adaudit-rce/","summary":"A public exploit and scanner have been published for CVE-2026-6516, a pre-authentication remote code execution vulnerability in ManageEngine ADAudit Plus Agent APIs.","title":"ManageEngine ADAudit Plus: Pre-authentication remote code execution (CVE-2026-6516)","url":"https://feed.craftedsignal.io/briefs/2026-10-adaudit-rce/"}],"language":"en","title":"CraftedSignal Threat Feed - MacOS Agents","version":"https://jsonfeed.org/version/1.1"}