PrivEsc Vulnerability in Zohocorp Endpoint Central <11.4.2540.23 via JAR
CVE-2026-77697 Published on September 7, 2026

Privilege Escalation
Zohocorp ManageEngine Endpoint Central versions below 11.4.2540.23 are vulnerable to Privilege Escalation During JAR Extraction

NVD

Vulnerability Analysis

CVE-2026-77697 can be exploited with local system access, and requires small amount of user privileges. This vulnerability is considered to have a low attack complexity. The potential impact of an exploit of this vulnerability is considered to be low. considered to have a small impact on confidentiality and integrity and availability.

Attack Vector:
LOCAL
Attack Complexity:
LOW
Privileges Required:
LOW
User Interaction:
NONE
Scope:
CHANGED
Confidentiality Impact:
LOW
Integrity Impact:
LOW
Availability Impact:
LOW

Weakness Type

Improper Privilege Management

The software does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.


Products Associated with CVE-2026-77697

Want to know whenever a new CVE is published for Zoho Corp Manageengine Endpoint Central? stack.watch will email you.

Zoho Corp Manageengine Endpoint Central
 

Affected Versions

Zohocorp ManageEngine Endpoint Central: