Tag

#manageengine

1 post tagged #manageengine.

Analysis · May 20, 2026 · Colten Anderson

Turning on SSO turned on the vulnerability, and turning it back off didn't help

CVE-2022-47966 gave unauthenticated RCE across two dozen ManageEngine products, but only where SAML single sign-on was enabled. The best-practice config was the attack surface, the root cause was a years-stale bundled library, and 'was enabled' counted too.