Local Privilege Escalation in ManageEngine Endpoint Central

Executive Summary

CVE-2026-77699 is a local privilege escalation vulnerability in Zohocorp ManageEngine Endpoint Central versions below 11.5.2605.01. It occurs because the software loads a DLL from an untrusted path, allowing a low-privilege user to escalate their privileges to a higher level.

Useful 0 Not Useful 0

Detection Guidance

To detect this vulnerability, check the version of ManageEngine Endpoint Central installed on your system. Compare it against version 11.5.2605.01 or later. If your version is below this, the system is vulnerable. Use commands like 'wmic product get name,version' on Windows or 'dpkg -l | grep manageengine' on Linux to check the installed version.

Useful 0 Not Useful 0

Impact Analysis

This vulnerability allows an attacker with low privileges to gain higher privileges on the system, potentially leading to unauthorized access, data manipulation, or system compromise. It could enable attackers to perform actions beyond their intended permissions.

Useful 0 Not Useful 0

Compliance Impact

This vulnerability could potentially affect compliance with GDPR and HIPAA by allowing unauthorized privilege escalation. A low-privilege user gaining higher access may lead to unauthorized data access or modifications, violating confidentiality and integrity requirements under these regulations.

Useful 0 Not Useful 0

Mitigation Strategies

Update ManageEngine Endpoint Central to version 11.5.2605.01 or later to address the privilege escalation vulnerability.

Useful 0 Not Useful 0