# Mitigating Zero-Day Vulnerabilities

Last Updated On: 25 Sep 2026

Endpoint Central MSP helps you detect and mitigate zero-day vulnerabilities by deploying scripts that enforce secure configurations, alter registry values, and close vulnerable ports — before an attacker can exploit them.

## Overview

A zero-day vulnerability is a software security flaw that is disclosed to the public but does not have a patch in place to fix the flaw. Zero-day attacks have been increasing at an alarming rate over the last few years. Even though zero-day vulnerabilities cannot be fixed without patches from the vendor, it is nevertheless necessary to mitigate them before an attacker exploits the vulnerability. Since time is a crucial factor with zero-day vulnerabilities, the sooner you mitigate, the better.

**Note:** Even after the vendor releases a patch for a zero-day vulnerability, it will continue to be listed under zero-day vulnerabilities because of its severity and importance.

## Configuring Alerts about Latest Zero-Day Vulnerabilities

To stay updated with the latest security news including zero-days, navigate to **Dashboard**. Under the **Latest Security News** section, you can see news bulletins describing the latest security events. Clicking on them will redirect you to the Endpoint Central MSP Pitstop blog, where you can learn more.

To receive email notifications whenever new security news is published, click the **bell** icon and enter your Email ID.

![Dashboard showing the Latest Security News section with the bell icon for configuring email alerts](https://www.manageengine.com/products/desktop-central/help/images/vm18.png)

Latest Security News section on the Dashboard with the option to subscribe for email alerts.

## Viewing and Mitigating Zero-Day Vulnerabilities

To view the zero-day vulnerabilities present across your managed computers, navigate to **Threats → Zero-day Vulnerabilities**.

All detected zero-day vulnerabilities will be listed here. To mitigate a specific vulnerability, click **Fix** under the **Action** column. After clicking Fix, one of the following cases applies:

- **Case 1 — Patch available:** A manual deployment task will be created. To learn more about deploying patches manually, refer to [this page](https://www.manageengine.com/desktop-management-msp/help/patch-management/manual-deployment.html).
- **Case 2 — No patch available:** Either scripts or security configuration(s) will be deployed as a workaround via the manual patch deployment page to mitigate the zero-day vulnerability. If no script or security-configuration workaround is available, follow the manual resolution displayed for the vulnerability. When the vulnerability affects a component supplied with another product, contact the support team for that product for assistance. For the complete workflow, refer to [Remediating Vulnerabilities without a Deployable Patch](https://www.manageengine.com/desktop-management-msp/help/vulnerability-management/vulnerability-remediation.html#remediating-vulnerabilities-without-a-deployable-patch).

![Zero-day Vulnerabilities view showing the Fix option under the Action column for each vulnerability](https://www.manageengine.com/products/desktop-central/help/images/vm17.png)

Zero-day Vulnerabilities view with the Fix action for each detected vulnerability.

**Note:**

- If a zero-day vulnerability is detected on a managed computer, that computer will also be listed under **Systems → Attention Required → Zero-day Found**. Select the system and click **Deploy Fixes** to mitigate it.
- To remediate zero-days automatically, set up an [Automated Patch Deployment](https://www.manageengine.com/desktop-management-msp/help/patch-management/apd.html) task for Critical Updates — patches for zero-days are classified as critical. Once configured, whenever a patch becomes available for a zero-day, it will be deployed automatically.

## Related

- [Vulnerability Management Overview](https://www.manageengine.com/desktop-management-msp/help/vulnerability-management/vulnerability-management-overview.html)
- [Vulnerability Assessment and Prioritization](https://www.manageengine.com/desktop-management-msp/help/vulnerability-management/assess-and-remediate-vulnerabilities.html)
- [Vulnerability Remediation](https://www.manageengine.com/desktop-management-msp/help/vulnerability-management/vulnerability-remediation.html)
- [Manual Patch Deployment](https://www.manageengine.com/desktop-management-msp/help/patch-management/manual-deployment.html)
- [Automated Patch Deployment](https://www.manageengine.com/desktop-management-msp/help/patch-management/apd.html)