EIP-2026-104328

This advisory details an improper privilege management vulnerability in ManageEngine ServiceDesk Plus, where low-privileged users can delete backup databases via a crafted URI due to insufficient permission checks. The PoC demonstrates the exploit via a specific HTTP request.