CVE-2025-5496: Zohocorp ManageEngine Endpoint Central

Low severity, CVSS 3.3. EPSS: 0.3% chance of exploitation in the next 30 days.

ZohoCorp ManageEngine Endpoint Central versions earlier than 11.4.2508.14, 11.4.2516.06, and 11.4.2518.01 are affected by an arbitrary file deletion vulnerability in the agent setup component.

Affected products

• Zohocorp ManageEngine Endpoint Central: before 11.4.2508.14 (fixed in 11.4.2508.14); from 11.4.2510.01, before 11.4.2516.06 (fixed in 11.4.2516.06)

Published 2025-10-21. Last modified 2026-10-08.