Zoho ManageEngine Patch Connect Plus before 90099 is vulnerable to unauthenticated remote code execution.