ACTIVELY EXPLOITED
CVE-2021-44515: Zoho Desktop Central Authentication Bypass Vulnerability
| Vendor | Zoho |
|---|---|
| Product | Desktop Central |
| Actively exploited | Yes |
| Added to CISA KEV | 10 Dec 2021 |
| CISA federal deadline | 24 Dec 2021 |
Required action (CISA's text)
Apply updates per vendor instructions.
Description (NVD)
Zoho Desktop Central contains an authentication bypass vulnerability that could allow an attacker to execute arbitrary code in the Desktop Central MSP server.
SOURCES
Other Zoho flaws
- CVE-2022-28810: Zoho ManageEngine ADSelfService Plus Remote Code Execution Vulnerability
- CVE-2022-47966: Zoho ManageEngine Multiple Products Remote Code Execution Vulnerability
- CVE-2022-35405: Zoho ManageEngine Multiple Products Remote Code Execution Vulnerability
- CVE-2021-44077: Zoho ManageEngine ServiceDesk Plus Remote Code Execution Vulnerability
- CVE-2021-37415: Zoho ManageEngine ServiceDesk Authentication Bypass Vulnerability
Data from NVD, CISA KEV, FIRST EPSS and vendor advisories. Updated 10 Nov 2026.