CVE-2026-77699: Local privilege escalation due to loading a dll from an untrusted path

Severity: Medium
Update Release Date: March 2026
Reported by: Sandro Poppi via ManageEngine Bug Bounty Program

Last Updated On: 31 Jul 2026|

2 minutes read |

This document highlights the security update for a vulnerability identified in the Agent binaries within Endpoint Central.

Release Notes

A privilege escalation vulnerability in Endpoint Central was identified, which may allow a low privilege user to elevate into a privileged account.

This vulnerability has been fixed and released in March 2026. The mitigation is available in build 11.5.2605.01.

If you have any questions or require further assistance, please contact our support team.