What’s Vulnerable › Vulnerabilities

CVE-2025-5494: Privilege Escalation

• Severity: high (CVSS 7.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-09-25 · updated 2026-10-11
• Weakness: CWE-269

Description

ZohoCorp ManageEngine Endpoint Central was impacted by an improper privilege management issue in the agent setup. This issue affects Endpoint Central: through 11.4.2500.25, through 11.4.2508.13.

Affected products

• Zohocorp ManageEngine Endpoint Central: before 11.4.2500.26; from 11.4.2508.01 before 11.4.2508.14 — fixed in 11.4.2500.26, 11.4.2508.14

How to fix

Upgrade to a fixed version: Zohocorp ManageEngine Endpoint Central 11.4.2500.26, 11.4.2508.14. Check the vendor advisory for mitigations.

References

• https://www.manageengine.com/products/desktop-central/privilege-escalation-endpointcentral-agent.html

Get alerted when CVE-2025-5494 or the next vulnerability affects your stack