Summary
Ein lokaler Angreifer kann mehrere Schwachstellen in Zoho ManageEngine Endpoint Central ausnutzen, um Rechte zu erweitern.
Product
ManageEngine Endpoint Central ist eine Desktop- und Mobile-Device-Management-Software.
Vulnerabilities 4
-
Medium 6.3
Privilege Escalation
Zohocorp ManageEngine Endpoint Central versions below 11.4.2540.23 are vulnerable to Privilege Escalation During JAR Extraction
-
Medium 6.3
Privilege Escalation
Zohocorp ManageEngine Endpoint Central versions below 11.5.2600.15 are vulnerable to Privilege Escalation Due to Outdated Component
-
Medium 5.7
Privilege Escalation
Zohocorp ManageEngine Endpoint Central versions before 11.5.2605.01 are vulnerable to local privilege escalation due to Agent upgrade.
-
Medium 5.0
Privilege Escalation
Zohocorp ManageEngine Endpoint Central versions below 11.5.2605.01 are vulnerable to Local privilege escalation due to loading a dll from an untrusted path.
Revision history
-
#1
Initiale Fassung
References
-
Manageengine Advisory vom 2026-09-07
https://www.manageengine.com/products/desktop-central/kb/vulnerability-management/privilege-escalation-vulnerability-during-jar-extraction.html
-
Manageengine Advisory vom 2026-09-07
https://www.manageengine.com/products/desktop-central/help/cve/privilege-escalation-dll-loading-vulnerability.html
-
Manageengine Advisory vom 2026-09-07
https://www.manageengine.com/products/desktop-central/help/cve/agent-upgrade-privilege-escalation.html
-
Manageengine Advisory vom 2026-09-07
https://www.manageengine.com/products/desktop-central/help/patch_management/kb/privilege-escalation-outdated.html
-
GitHub Advisory Database vom 2026-09-07
https://github.com/advisories/GHSA-CQF9-3872-R742
-
GitHub Advisory Database vom 2026-09-07
https://github.com/advisories/GHSA-GHWP-X5JF-G28G
-
GitHub Advisory Database vom 2026-09-07
https://github.com/advisories/GHSA-MX2J-MCP4-JC4G
-
GitHub Advisory Database vom 2026-09-07
https://github.com/advisories/GHSA-7FXX-HFFC-2JFW