Researchers to release PoC exploit for critical Zoho RCE bug, patch now

Successful exploitation enables unauthenticated threat actors to execute arbitrary code on Zoho ManageEngine servers if the SAML-based single-sign-on (SSO) is or was enabled at least once before the attack.