Insufficient Driver Signature Validation in Zohocorp ManageEngine Malware Protection Plus

Executive Summary

CVE-2026-14308 is an insufficient driver signature validation flaw in Zohocorp ManageEngine Malware Protection Plus versions before 1.0.64.12. The MEARWService component relies only on the OS for driver validation, creating a security gap. A privileged attacker could exploit this to cause a persistent denial-of-service, leaving systems unprotected.

Useful 0 Not Useful 0

Detection Guidance

To detect this vulnerability, check the installed build version of ManageEngine Malware Protection Plus. Compare it against version 1.0.64.12. If the version is lower, the system is vulnerable. This can be done by logging into the Malware Protection Plus console and reviewing the build number.

Useful 0 Not Useful 0

Impact Analysis

This vulnerability allows a privileged attacker to cause a persistent denial-of-service, disabling the malware protection on your system. This leaves your system vulnerable to malware infections and other threats.

Useful 0 Not Useful 0

Mitigation Strategies

Immediately update ManageEngine Malware Protection Plus to version 1.0.64.12 or higher. Log into the console, check the current build, download the latest PPM, and apply the update. Ensure no critical services are running during the update to avoid disruptions.

Useful 0 Not Useful 0