Local Privilege Escalation in Zohocorp ManageEngine Endpoint Central

Executive Summary

CVE-2026-77698 is a local privilege escalation vulnerability in Zohocorp ManageEngine Endpoint Central versions before 11.5.2605.01. It occurs during the agent upgrade process, allowing a low-privilege user to escalate their privileges to a privileged account.

Useful 0 Not Useful 0

Detection Guidance

To detect this vulnerability, check the version of ManageEngine Endpoint Central installed on your system. Compare it against version 11.5.2605.01 or later. If your version is older, the system is vulnerable. Use commands like 'wmic product get name,version' on Windows or 'dpkg -l | grep manageengine' on Linux to verify the installed version.

Useful 0 Not Useful 0

Impact Analysis

This vulnerability could allow an attacker with low privileges to gain higher privileges on the system, potentially leading to unauthorized access, data manipulation, or system control. It specifically affects the agent upgrade process in Endpoint Central.

Useful 0 Not Useful 0

Compliance Impact

This vulnerability could potentially impact compliance with GDPR and HIPAA by allowing unauthorized privilege escalation. A low-privilege user gaining elevated access may lead to unauthorized data access or modification, violating confidentiality and integrity requirements under these regulations.

Useful 0 Not Useful 0

Mitigation Strategies

Update Endpoint Central to version 11.5.2605.01 or later to fix the vulnerability. This version addresses the local privilege escalation issue in Agent binaries during upgrades.

Useful 0 Not Useful 0