ManageEngine Endpoint Central <=11.5.2600.15 PrivEsc via Outdated Component
CVE-2026-85640 Published on September 7, 2026

Privilege Escalation
Zohocorp ManageEngine Endpoint Central versions below 11.5.2600.15 are vulnerable to Privilege Escalation Due to Outdated Component

NVD

Vulnerability Analysis

CVE-2026-85640 is exploitable with local system access, and requires small amount of user privileges. This vulnerability is considered to have a low attack complexity. The potential impact of an exploit of this vulnerability is considered to be low. considered to have a small impact on confidentiality and integrity and availability.

Attack Vector:
LOCAL
Attack Complexity:
LOW
Privileges Required:
LOW
User Interaction:
NONE
Scope:
CHANGED
Confidentiality Impact:
LOW
Integrity Impact:
LOW
Availability Impact:
LOW

Weakness Type

Improper Privilege Management

The software does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.


Products Associated with CVE-2026-85640

Want to know whenever a new CVE is published for Zoho Corp Manageengine Endpoint Central? stack.watch will email you.

Zoho Corp Manageengine Endpoint Central
 

Affected Versions

Zohocorp ManageEngine Endpoint Central: