5
CVE-2026-77699
- EPSS 0.16%
- Veröffentlicht 07.09.2026 10:30:16
- Zuletzt bearbeitet 08.09.2026 18:35:10
- Erkennungen
Privilege Escalation
Zohocorp ManageEngine Endpoint Central versions below 11.5.2605.01 are vulnerable to Local privilege escalation due to loading a dll from an untrusted path.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerZohocorp
≫
Produkt
ManageEngine Endpoint Central
Default Statusunaffected
Version
0
Version <
11.5.2605.01
Status
affected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. 
Login
Login| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.16% | 0.052 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| 0fc0942c-577d-436f-ae8e-945763c79b02 | 5 | 0.8 | 3.7 |
CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:L
|
CWE-269 Improper Privilege Management
The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.
https://www.manageengine.com/products/desktop-central/help/cve/privilege-escalation-dll-loading-vulnerability.html