Hello everyone,
Following a review of the reported vulnerability associated with the Brotli decoder, we confirm that CVE-2026-111497 is not applicable to Endpoint Central, as the product neither uses nor bundles the Node.js or .NET components associated with this vulnerability.
No action is required from you in relation to this CVE.
ManageEngine remains committed to product security and transparency, and we continue to assess relevant security vulnerabilities to help our customers maintain secure IT environments. For further assistance, please post your comment here or contact our support.
Regards,
ManageEngine