Hackers exploiting vulnerability affecting Zoho ManageEngine products: Rapid7

Researchers at cybersecurity firm Rapid7 have observed exploitation of a vulnerability affecting two dozen ManageEngine products from software company Zoho.

The bug – CVE-2022-47966 – was patched in waves starting on October 27, with the last product receiving a patch on November 7.

Discovered by a researcher from Viettel Cyber Security, the vulnerability allows an unauthenticated adversary to execute code on a system.

On Thursday, experts from the Horizon3.ai Attack Team published a proof of concept and said it was …

adversary attack bug code cve cve-2022-47966 cyber cyber security cybersecurity experts exploitation exploiting from software hackers horizon3 horizon3.ai manageengine november october patch product products rapid7 researcher researchers security software system team vulnerability zoho zoho manageengine