ZohoCorp ManageEngine Endpoint Central versions earlier than 11.4.2508.14, 11.4.2516.06, and 11.4.2518.01 are affected by an arbitrary file deletion vulnerability in the agent setup component.
Fix
Patch, vendor advisory and mitigation references on NVD 1
- https://www.manageengine.com/products/desktop-central/kb/arbitrary-file-deletion-allows-local-privilege-escalation.html Vendor Advisory
Every line above is quoted from NVD, CISA, Microsoft, the vendor's own advisory or DISA; nothing is generated.
Change history 1
- First seenCVSS 3.3 · zohocorpNVD modified 2026-10-08 22:10
Affected (CPE criteria) 1
cpe:2.3:a:zohocorp:manageengine_endpoint_central:*:*:*:*:*:*:*:*