What’s Vulnerable › Vulnerabilities
CVE-2025-5496: Arbitrary File Deletion
- Severity: low (CVSS 3.3 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.3% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2025-10-21 · updated 2026-10-08
- Weakness: CWE-269
Description
ZohoCorp ManageEngine Endpoint Central versions earlier than 11.4.2508.14, 11.4.2516.06, and 11.4.2518.01 are affected by an arbitrary file deletion vulnerability in the agent setup component.
Affected products
- Zohocorp ManageEngine Endpoint Central: before 11.4.2508.14; from 11.4.2510.01 before 11.4.2516.06 — fixed in 11.4.2508.14, 11.4.2516.06
How to fix
Upgrade to a fixed version: Zohocorp ManageEngine Endpoint Central 11.4.2508.14, 11.4.2516.06. Check the vendor advisory for mitigations.
References
Get alerted when CVE-2025-5496 or the next vulnerability affects your stack