Local Privilege Escalation in Zoho Endpoint Central <= 11.5.2605.01
CVE-2026-77698 Published on September 7, 2026

Privilege Escalation
Zohocorp ManageEngine Endpoint Central versions before 11.5.2605.01 are vulnerable to local privilege escalation due to Agent upgrade.

NVD

Vulnerability Analysis

CVE-2026-77698 is exploitable with local system access, requires user interaction and a small amount of user privileges. This vulnerability is considered to have a low attack complexity. The potential impact of an exploit of this vulnerability is considered to be low. considered to have a small impact on confidentiality and integrity and availability.

Attack Vector:
LOCAL
Attack Complexity:
LOW
Privileges Required:
LOW
User Interaction:
REQUIRED
Scope:
CHANGED
Confidentiality Impact:
LOW
Integrity Impact:
LOW
Availability Impact:
LOW

Weakness Type

Improper Privilege Management

The software does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.


Products Associated with CVE-2026-77698

Want to know whenever a new CVE is published for Zoho Corp Manageengine Endpoint Central? stack.watch will email you.

Zoho Corp Manageengine Endpoint Central
 

Affected Versions

Zohocorp ManageEngine Endpoint Central: