Live › vulnerability › CVE-2021-44515
Go to dashboardZoho Desktop Central, an IT management server for managed service providers, has an authentication bypass that lets an unauthenticated attacker reach the MSP server. The sources say the bypass can lead to arbitrary code execution on that server.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 19:11 UTC, 3h before NVD. All times on this page are UTC.
Apply updates per vendor instructions.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| Zoho Desktop Central | vendor | – | – |
Unknown from the sources. In the analyst’s queue.
Apply the updates from Zoho per vendor instructions, as CISA requires; the fixed version is unknown from these sources.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Zoho ManageEngine Desktop Central is vulnerable to authentication bypass, leading to remote code execution on the server, as exploited in the wild in December 2021. For Enterprise builds 10.1.2127.17 and earlier, upgrade to 10.1.2127.18. For Enterprise builds 10.1.2128.0 through 10.1.2137.2, upgrade to 10.1.2137.3. For MSP builds 10.1.2127.17 and earlier, upgrade to 10.1.2127.18. For MSP builds 10.1.2128.0 through 10.1.2137.2, upgrade to 10.1.2137.3.
This page as .md · .json · in your agent: get_signal("CVE-2021-44515")
CISA KEV catalog, Creative Commons 0 · EPSS scores by FIRST, used with attribution · NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.