Privilege Escalation Vulnerability in ManageEngine Endpoint Central by Zoho
CVE-2026-85640

6.3MEDIUM

Key Information:

Vendor

Zohocorp
Status
Manageengine Endpoint Central
Vendor
CVE Published:
7 September 2026

What is CVE-2026-85640?

An issue has been identified in ManageEngine Endpoint Central where versions prior to 11.5.2600.15 are susceptible to privilege escalation due to an outdated component. This vulnerability allows unauthorized users to gain elevated access privileges, potentially compromising system security and integrity. Users are encouraged to update their software to the latest version to mitigate this risk.

Affected Version(s)

ManageEngine Endpoint Central 0 < 11.5.2600.15

References

https://www.manageengine.com/products/desktop-central/hel...

CVSS V3.1

Score:
6.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.