CVE-2026-77699CWE-269privilege-escalation

CVE-2026-77699

Medium · published September 7, 2026

CVSS v3.1
5.0
EPSS
0%
Percentile
20.5
In the wild
Unconfirmed
What it is

Zohocorp ManageEngine Endpoint Central versions below 11.5.2605.01 are vulnerable to Local privilege escalation due to loading a dll from an untrusted path.

The record
Technical detail
CVSS v3.1
5.0 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.00290 · 20.5th percentile
Weakness
CWE-269 · Improper Privilege Management
Published
2026-09-07T15:17Z
References (1)
https://www.manageengine.com/products/desktop-central/help/cve/privilege-escalation-dll-loading-vulnerability.html · 0fc0942c-577d-436f-ae8e-945763c79b02
EPSS history
Timeline
  • 09 SEP 03:20Z
    EPSS moved — → 0%
    epss
  • 07 SEP 10:30Z
    Privilege Escalation
    cvelistv5