Zoho ManageEngine Remote Access Plus 10.0.258 does not validate user permissions properly, allowing for privilege escalation and eventually a full application takeover.Referenceshttps://www.manageengine.com/remote-desktop-management/knowledge-base/elevation-of-privilege.html