Critical Vulnerability Alert: Remote Code Execution in Apache HTTP Server (CVE-2026-119618)
Vulnerability Overview The Apache Software Foundation has released a security update addressing a critical remote code execution (RCE) vulnerability in Apache HTTP Server, tracked as CVE-2026-119618. The vulnerability exists in the mod_http2 module due
Patch Tuesday Updates: November 2026
Good day, everyone! Here's a list of the updates released in this month's Patch Tuesday. New OS Security Updates: 45970 - 2026-11 Servicing Stack Update for Windows 10 Version 1607 for x64-based Systems (KB5131083) 45971 - 2026-11 Servicing Stack Update
Patch Management Desktop Icons
Hi, Is there a way to update patches on machines and not create desktop icons. When i run patch manager on machines, users get desktop icons of the applications just installed. Then they can not delete them without admin rights. Is there a way to not have the icons appear on users desktop? Thanks
Inventory not getting scan after upgrade the Patch_9285907
After upgrading the the build version 11.5.2622.19 , inventory not getting scan. Agent getting failed, raised request but it is still pending from more days. Ticket ID: 9285907
New problem: Downloading patch-scan-data.json.gz failed with error code : 404
Patching has gone well this past couple of years. Today I find anything pushed brings up this error: Downloading patch-scan-data.json.gz failed with error code : 404 Has anyone else encountered this? Seem to have occurred for no reason I can see. Agents
Critical Security Alert: Google Brotli Buffer Overflow Vulnerability (CVE-2026-111497)
A critical buffer overflow vulnerability has been identified in the Google Brotli decoder, affecting multiple versions of the Brotli compression library across all platforms. Tracked as CVE-2026-111497, this vulnerability has been assigned a CVSS v4.0
OSD – Trigger/force patching as final post-deployment step
Hi everyone, We are currently implementing the Endpoint Central OSD module for our Windows staging process. As part of our post-deployment phase, we install the Endpoint Central UEMS Agent as one of the final steps using the new Software Package integration
October .Net out of band update
Are these patches available for Endpoint central yet? .NET October 2026 Out-of-Band Security Updates - .NET Blog
Windows Security Alert: Two Critical PHP RCE Vulnerabilities (PHP2Shell) Rated CVSS 9.2
Important Update: Endpoint Central and the Secure Gateway Server are not affected by these CVEs. The vulnerabilities only impact the PHP runtime. Because our products do not use or bundle PHP as part of our product stack, they are completely secure against
Linux Security Alert: Two Critical PHP RCE Vulnerabilities (PHP2Shell) Rated CVSS 9.2
Important Update: Endpoint Central and the Secure Gateway Server are not affected by these CVEs. The vulnerabilities only impact the PHP runtime. Because our products do not use or bundle PHP as part of our product stack, they are completely secure against
Security Alert: Critical Oracle Java SE Vulnerability (CVE-2026-91403)
Oracle has released an out-of-band security alert addressing a critical vulnerability, CVE-2026-91403, affecting Oracle Java SE, Oracle GraalVM for JDK, and Oracle GraalVM Enterprise Edition. The vulnerability has been assigned a CVSS v3.1 severity score
Patch Tuesday Updates: October 2026
Good day, everyone! Here's a list of the updates released in this month's Patch Tuesday. New OS Security Updates: 45676 - 2026-10 Servicing Stack Update for Windows 10 Version 1607 for x64-based Systems (KB5126649) 45677 - 2026-10 Servicing Stack Update
Windows 11 26H2 Feature - Release Information
Good day, everyone! As an initiative we have supported the Enablement Package for Upgrading the systems from Windows 11 Version 24H2/25H2 to Windows 11 Version 26H2. The corresponding Windows 11 26H2 operating system (OS) patches will be released separately
Deploy and enforce macOS updates via DDM with Endpoint Central
Endpoint Central now supports Apple's Declarative Device Management (DDM) for macOS OS updates, on MDM-enrolled devices running macOS 14 (Sonoma) and later, from build 11.5.2632.03. About DDM DDM is Apple’s newer way of managing Macs. Instead of the server
Option to auto-close apps that require update AND/OR notify users to save work then quit apps that require updates
I think this shouldn't be too hard to do. Better than seeing "Patch update delayed since application is used by another process" errors https://www.manageengine.com/products/desktop-central/patch-update-delayed-since-application-is-used-by-another-process.html?dci&did=45-1224-2016-05-11-20-21-27-2695 it should be alot like the "Notification Message before Reboot*" but instead "Notification Message before closing vulnerable applications* This would apply for apps such as office 365. which require
Endpoint Central server information update following patching
The situation is we have a set of devices that we patch every other month, the devices are used for a specific purpose so not on or even in our hands than often. We like to turn these around quickly, so patch and power off. We keep seeing it whereby the
Microsoft Office Click-To-Run Install Options
We're looking to see if there are additional options or workarounds to Office Click-To-Run Install Options. Between the three current options of Closing Forcefully, Do not install while in Use, or Prompting the user to skip we're running into situations
Update for Microsoft Excel 2016 (KB5002665) 64-Bit Edition ID Patch
Good morning. Today I tried to download the "Update for Microsoft Excel 2016 (KB5002665) 64-Bit Edition" patch (patch ID 113957). I am encountering a firewall error; an error occurs when I try to load the .exe file. I should note that the firewall is
Using Custom Groups defined by OU to deploy patches
It seems as though if I use a static Custom Group made of of OUs, when any member of an OU changes the changes are not reflected in the static group. That's why they are called "static." But when I try and use a Dynamic Group I cannot select its members based upon OU. does it not make sens that I would want to do this? i can see why some would want to deploy based on OS, Service Pack, etc. but I can make a good case for deploying patches based on a Business unit (OU in active directory-speak)
Patch Tuesday Updates: September 2026
Good day, everyone! Here's a list of the updates released in this month's Patch Tuesday. New OS Security Updates: 45338 - 2026-09 Servicing Stack Update for Windows 10 Version 1607 for x64-based Systems (KB5122874) 45339 - 2026-09 Servicing Stack Update
Confirming successful install of Dell Powershell Module/Dell BIOS Provider for updating Dell BIOS
I'm following this article to run BIOS updates on Dell desktops. It works as described. A prerequisite of the BIOS update process is that the Dell Powershell Module/Dell BIOS Provider be installed on the endpoint. An optional "patch" (shown below) is
Mac Patch Deployment - User Notification & Postpone Schedule Configuration
Hi Team, We are currently evaluating Endpoint Central on a trial basis for 13 macOS systems in our environment. We have two requirements we'd like clarity on before proceeding further. Requirement 1 - Patch visibility to end users: Our Mac users are notified
not scanning correctly
I am currently running version 0.101.2362 of Power Toys. After last night's scan, Endpoint Central wants to install version 0.100.2 (See attached jpegs for verification)
Automatic Patch Deployment - Deployment Status
Greetings, I have created a small test group to test automated patching for my organization. I am uncertain why the summary shows that this 2nd device's (See capture below) deployment status states it is missing patches, though they are listed as completed
Utilizing Manage Engine to upgrade Papercut system
I'm wondering if anybody has experience utilizing Manage Engine to upgrade their Papercut software? We would like to do 1 version upgrade (from 25 to 26) and am wondering if Manage Engine can successfully perform this. I think there's a lot of clients
Patch Release: Google Chrome 151.0.7922.169/.170 for Windows and macOS
Hello everyone ! Google has released Chrome version 151.0.7922.169/.170 for Windows and macOS. This release includes important security fixes across multiple Chrome and Chromium components. Applying this update is recommended to protect systems against
Patch Tuesday Updates: August 2026
Good day, everyone! Here's a list of the updates released in this month's Patch Tuesday. New OS Security Updates: 45076 - 2026-08 Servicing Stack Update for Windows 10 Version 1607 for x64-based Systems (KB5120236) 45077 - 2026-08 Servicing Stack Update
Customizing O365 Patch Deployment to Exclude Visio Installation
Hello I would like assistance with configuring O365 patch deployments in Endpoint Central. Recently, I approved and deployed the following update: Microsoft 365 Apps for enterprise - en-us 16.0.20131.20154 However, when the automated deployment policy
Patch Tuesday Updates: July 2026
Good day, everyone! Here's a list of the updates released in this month's Patch Tuesday. New OS Security Updates: 44816 - 2026-07 Servicing Stack Update for Windows 10 Version 1607 for x64-based Systems (KB5099542) 44817 - 2026-07 Servicing Stack Update
Endpoint Central 11.5.2622.05
I just updated Endpoint Central to version 11.5.2622.05. I configure the immediate deployment of updates to the clients, but the task doesn't start anymore (which it used to do before updating). After 1 day is still there without starting. What can I
Patch Installation problem: Cumulative Update for Win 11
Hello everyone. I am trying to deploy a series of cumulative update win 11 patches to a set of machines, the patches description are: 2026-06 Cumulative Update for Windows 11, version 24H2 for x64-based Systems (KB5094126) (26100.8655) (CVE-2026-49160)
Patch roll-back after installation
I am seeing a lot of issues with 2026-06 Cumulative Update Preview for Windows 11, version 25H2 for x64-based Systems (KB5095093) (26200.8737) being installed and rolled back, which is causing a higher than normal number of vulnerable systems. Is this
Patch Release: Google Chrome 150.0.7871.46/47 for Windows
Google has released Chrome version 150.0.7871.46/47 for Windows. This release includes critical security improvements across numerous Chrome and Chromium components, including Extensions, GPU, Browser, Blink, ANGLE, Skia, WebUSB, Safe Browsing, Network,
Use MEDC Cloud Sorage Space instead of Distribution Server to install Windows Updates
Internet connection is blocked on our Windows Server. Only ME Agent can connect to Endpoint Central. It would be great if the Cloud Storage Space could be used to installing Microsoft Updates. (Updates Download to Cloud Storage Space, then installing
UEMS Test & Approve using dynamic group
Hi all, would it be possible to take a Dynamic Custom Group for Test & Approve task? Or a way to override this: , so that even unapproved patches can be deployed via APD? We would like to deploy patches as soon as they're available for two specific apps
Patch Release: Google Chrome 149.0.7827.114/.115 for Windows and macOS
Google has released Chrome version 149.0.7827.114/.115 for Windows and macOS. This release addresses 28 security vulnerabilities, including five critical flaws and multiple high-severity issues affecting components such as Core, GPU, Network, Media, Autofill,
Patch Tuesday Updates: June 2026
Good day, everyone! Here's a list of the updates released in this month's Patch Tuesday. New OS Security Updates: 44578 - 2026-06 Servicing Stack Update for Windows 10 Version 1607 for x64-based Systems (KB5094141) 44579 - 2026-06 Servicing Stack Update
Automatic patch installation does not respect the configured deployment time period
I have enabled automatic patch installation, but the deployment time period is not being respected. It is configured so that patches should only be installed between 12:00 and 13:00. However, the logs show that installations are happening at 14:00, 14:05,
Visual Studio update
I have a number of machines with visual studio installed, but EC doesnt detect that they need updates. has anyone got EC patching monthly Visual studio updates?
Zero day Alert: Microsoft Defender Vulnerabilities (Actively Exploited)
Microsoft has disclosed two actively exploited zero-days affecting Microsoft Defender, including a privilege escalation flaw and a denial-of-service issue. The vulnerabilities have been patched in updated Defender Antimalware Platform releases, and organizations
Next Page