CVE-2026-77697 PUBLISHED

Privilege Escalation

Assigner: Zohocorp
Reserved: 21.08.2026 Published: 07.09.2026 Updated: 07.09.2026

Zohocorp ManageEngine Endpoint Central versions below 11.4.2540.23 are vulnerable to Privilege Escalation During JAR Extraction

Metrics

CVSS Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L
CVSS Score: 6.3

Product Status

Vendor Zohocorp
Product ManageEngine Endpoint Central
Versions Default: unaffected
  • affected from 0 to 11.4.2540.23 (excl.)

References

Problem Types

  • CWE-269: Improper Privilege Management CWE