6.3
CVE-2026-85640
- EPSS 0.2%
- Veröffentlicht 07.09.2026 10:45:14
- Zuletzt bearbeitet 08.09.2026 18:35:10
- Erkennungen
Privilege Escalation
Zohocorp ManageEngine Endpoint Central versions below 11.5.2600.15 are vulnerable to Privilege Escalation Due to Outdated Component
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerZohocorp
≫
Produkt
ManageEngine Endpoint Central
Default Statusunaffected
Version
0
Version <
11.5.2600.15
Status
affected
VulnDex Vulnerability Enrichment
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.2% | 0.097 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| 0fc0942c-577d-436f-ae8e-945763c79b02 | 6.3 | 2 | 3.7 |
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L
|
CWE-269 Improper Privilege Management
The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.
https://www.manageengine.com/products/desktop-central/help/patch_management/kb/privilege-escalation-outdated.html