CISA warns of critical ManageEngine RCE bug exploited in attacks

This security flaw is tracked as CVE-2022-47966 and was patched in several waves starting on October 27, 2022. Unauthenticated attackers can exploit it if the SAML-based SSO is or was enabled at least once before the attack to execute arbitrary code.