CVE-2021-28960

—

CVSS 3.1

9.8 critical

EPSS

2%p79

Published

Sep 21, 2021 (Sep 21, 2021)

Modified

Jun 17, 2026

Description

Zoho ManageEngine Desktop Central before build 10.0.683 allows unauthenticated command injection due to improper handling of an input command in on-demand operations.

Vendors: manageengine
Products: desktop central
Weakness: CWE-77
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (2.0%)

In the news0 stories

No ingested article mentions this CVE yet.