Arbitrary File Deletion
Priority LOW 16CWE-269Published · Updated
Key facts
- Attack vector
- Local
- Privileges required
- Low
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Privilege escalation
- Confidentiality · integrity · availability
- None · Low · None
- Fix status
- Fixed
Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-269.
Summary
ZohoCorp ManageEngine Endpoint Central versions earlier than 11.4.2508.14, 11.4.2516.06, and 11.4.2518.01 are affected by an arbitrary file deletion vulnerability in the agent setup component.
Why it matters now
Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00255 17th percentileScored 2026-11-07
Fix Fixed Endpoint Central (Zohocorp): 11.4.2508.14, 11.4.2516.06, 11.4.2518.01
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- No
- Technical impact
- Partial
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Zohocorp | Endpoint Central | before 11.4.2508.14; before 11.4.2516.06; before 11.4.2518.01 | 11.4.2508.14, 11.4.2516.06, 11.4.2518.01 | Patch available | CNA |
- Endpoint Central VendorZohocorp Affected before 11.4.2508.14; before 11.4.2516.06; before 11.4.2518.01 Fixed in 11.4.2508.14, 11.4.2516.06, 11.4.2518.01 Patch available CNA
CPE configurations NVD · 1
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:zohocorp:manageengine_endpoint_central:*:*:*:*:*:*:*:* | before 11.4.2508.14; 11.4.2510.01 to before 11.4.2516.06 | Vulnerable | Zohocorp |
- cpe:2.3:a:zohocorp:manageengine_endpoint_central:*:*:*:*:*:*:*:* Versions before 11.4.2508.14; 11.4.2510.01 to before 11.4.2516.06 Vulnerable ·Zohocorp
Remediation
- Fix · CNA Endpoint Central (Zohocorp) Fixed in 11.4.2508.14, 11.4.2516.06, 11.4.2518.01
Timeline
- 2026-10-02 Threatist record created from CVE-2025-5496
- 2026-10-03 Alias added: GHSA-c58g-qw82-6m5x
References
More Zohocorp Manageengine Endpoint Central vulnerabilities
- TI-2024-26074 Incorrect authorization in ManageEngine Endpoint Central CVSS 3.1HIGH 8.3
- TI-2024-09463 Agent Arbitrary File Deletion CVSS 3.1HIGH 7.8
- TI-2025-04934 Privilege escalation in Zohocorp Endpoint Central CVSS 3.1HIGH 7.8
- TI-2023-05614 ManageEngine Information Disclosure in Multiple Products CVSS 3.1MEDIUM 5.5
- TI-2025-06811 XML injection in Zohocorp Endpoint Central CVSS 3.1MEDIUM 5.3
- TI-2025-10300 Sensitive Information Logged CVSS 3.1MEDIUM 4.3
Sources
- CVE-2025-5496 · CVE Program
- CVE-2025-5496 · NVD
- FIRST EPSS
- GHSA-c58g-qw82-6m5x · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences