Local Priv Escal in Zohocorp ManageEngine Endpoint Central <11.5.2605.01 DLL Load
CVE-2026-77699 Published on September 7, 2026

Privilege Escalation
Zohocorp ManageEngine Endpoint Central versions below 11.5.2605.01 are vulnerable to Local privilege escalation due to loading a dll from an untrusted path.

NVD

Vulnerability Analysis

CVE-2026-77699 can be exploited with local system access, requires user interaction and a small amount of user privileges. This vulnerability is consided to have a high level of attack complexity. The potential impact of an exploit of this vulnerability is considered to be low. considered to have a small impact on confidentiality and integrity and availability.

Attack Vector:
LOCAL
Attack Complexity:
HIGH
Privileges Required:
LOW
User Interaction:
REQUIRED
Scope:
CHANGED
Confidentiality Impact:
LOW
Integrity Impact:
LOW
Availability Impact:
LOW

Weakness Type

Improper Privilege Management

The software does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.


Products Associated with CVE-2026-77699

Want to know whenever a new CVE is published for Zoho Corp Manageengine Endpoint Central? stack.watch will email you.

 

Affected Versions

Zohocorp ManageEngine Endpoint Central: