CVE-2026-3182
MediumCVSS 4.3Exploitation Probability (EPSS)
Low risk20th percentile - higher than 20% of all known CVEs
Summary
Zohocorp ManageEngine Endpoint Central versions before 11.4.2528.34 are affected by cleartext transmission of sensitive information vulnerability.
Risk Assessment
Sensitive data such as passwords or API keys can be intercepted by an attacker during transmission, leading to unauthorized system access.
Recommendation
Update ManageEngine Endpoint Central to version 11.4.2528.34 or later, which encrypts the transmission of sensitive data.
Other vulnerabilities in ManageEngine Endpoint Central
See all- CVE-2026-85640Medium
Zohocorp ManageEngine Endpoint Central versions below 11.5.2600.15 are vulnerable to privilege escalation due to an outdated component.
- CVE-2026-77699Medium
Zohocorp ManageEngine Endpoint Central versions below 11.5.2605.01 are vulnerable to local privilege escalation due to loading a DLL from an untrusted path.
- CVE-2026-77697Medium
Zohocorp ManageEngine Endpoint Central versions below 11.4.2540.23 are vulnerable to privilege escalation during JAR extraction.
- CVE-2026-77698Medium
Zohocorp ManageEngine Endpoint Central versions before 11.5.2605.01 are vulnerable to local privilege escalation due to Agent upgrade.
Original NVD description (English source)
Zohocorp ManageEngine Endpoint Central versions before 11.4.2528.34 are affected by cleartext transmission of sensitive information vulnerability.