5.7
CVE-2026-77698
- EPSS 0.23%
- Veröffentlicht 07.09.2026 09:51:04
- Zuletzt bearbeitet 08.09.2026 18:35:10
- Erkennungen
Privilege Escalation
Zohocorp ManageEngine Endpoint Central versions before 11.5.2605.01 are vulnerable to local privilege escalation due to Agent upgrade.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerZohocorp
≫
Produkt
ManageEngine Endpoint Central
Default Statusunaffected
Version
0
Version <
11.5.2605.01
Status
affected
VulnDex Vulnerability Enrichment
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.23% | 0.13 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| 0fc0942c-577d-436f-ae8e-945763c79b02 | 5.7 | 1.5 | 3.7 |
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L
|
CWE-269 Improper Privilege Management
The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.
https://www.manageengine.com/products/desktop-central/help/cve/agent-upgrade-privilege-escalation.html