ManageEngine (ADManager Plus) Products October 2025 Security Update Advisory

Overview

 

Zoho(https://www.zohocorp.com/) has released a security update that addresses a vulnerability in its ManageEngine suite of products. Users of affected products are advised to update to the latest version.

 

Affected Products

 

ADManager Plus 8023 and later versions

 

Resolved Vulnerabilities

 

High Impact Authenticated Command Injection Vulnerability in ADManager Plus (CVE-2025-10020) [1]

 

Vulnerability Patches

 

Please follow the security advisory published on October 24 to update to the appropriate version and the latest version.

ADManager Plus build 8024 version

 

Referenced Sites

 

[1] CVE-2025-10020 – Authenticated Command Injection

https://www.manageengine.com/products/ad-manager/admanager-kb/cve-2025-10020.html