Security Update - ManageEngine Desktop Central (Remote Code Execution - Fixed)
Hello everyone, Greetings. Patches have been released for a remote code execution vulnerability reported by DDI Vulnerability Research in Desktop Central, Desktop Central MSP and Patch Manager Plus products. This vulnerability allows any user in the network to upload files and execute commands on above mentioned Installed machine. The fixed versions of the above-mentioned products are available in below build numbers. 1. Desktop Central - Fixed in version 10.0.181 2. Desktop Central MSP - FixedSecurity Update - ManageEngine Desktop Central
Dear Users, Wishing everyone a happy and productive New Year. Quick security update on password encryption violation in Desktop Central and MSP products. Any user who can access the Desktop Central Server computer can acquire specific passwords in Desktop Central has been handled and released in build 100157. #securityupdate-dc For more details, Desktop Central https://www.manageengine.com/products/desktop-central/password-encryption-policy-violation.html Desktop Central MSP https://www.manageengine.com/desktop-management-msp/password-encryption-policy-violation.html
New to ADSelfService Plus?
Announcements
Zero day alert: CVE-2026-45585
CVE-2026-45585 is a Windows security feature bypass zero-day vulnerability, publicly known as “YellowKey", that targets the protections provided by Microsoft BitLocker full-disk encryption. This vulnerability can allow an attacker with physical accessCVE-2026-5525 – Notepad++ Stack-Based Buffer Overflow (DoS) Zero-day Vulnerability
A stack-based buffer overflow zero-day vulnerability has been identified in Notepad++ v8.9.3, specifically within the file drop handler component. The following are the vulnerability details: CVE ID: CVE-2026-5525 Affected Version: Notepad++ 8.9.3 Component:November 2024 Patch Tuesday comes with fixes for 89 vulnerabilities including 4 zero-days
Hey folks, Microsoft's November 2024 Patch Tuesday has released updates for the four following zero-days: 1) CVE-2024-43451 Vulnerable component: Windows NTLM Impact: Spoofing CVSS 3.1: 6.5 This critical zero-day vulnerability enables attackers to captureCritical vulnerability CVE-2024-3094 in XZ Utils: Everything you need to know!
Hello everyone! This forum talks in detail about the critical vulnerability CVE-2024-3094 which affects the XZ Utils, a widely used library found in both Mac and Linux distributions. About the critical vulnerability Tracked as CVE-2024-3094, this vulnerability[Zero-day] Microsoft release updates for 5 zero-days on November 2023's Patch Tuesday
Hello everyone! Microsoft has published updates for a total of 63 vulnerabilities in this Patch Tuesday. Of the total, 5 of these have been classified as zero-days. Here are the details of the zero days: CVE ID Description CVE-2023-36025 Windows SmartScreen