CVE-2026-14308: Insufficient Signature Validation
Zohocorp ManageEngine Malware Protection Plus versions before 1.0.64.12 are affected by insufficient driver signature validation in MEARWService.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Zohocorp ManageEngine Malware Protection Plusto a version that resolves this vulnerability.Fixed in 1.0.64.12
Event History
Frequently Asked Questions
Which installations are affected?
Zohocorp ManageEngine Malware Protection Plus versions before 1.0.64.12 are affected. Version 1.0.64.12 and later are not identified as affected by the provided data.
What access does an attacker need to exploit this issue?
The supplied vector indicates high privileges are required and no user interaction is required. The attack vector is listed as P, but the provided data does not further define the required proximity or access path.
What is the likely security impact?
The provided severity vector indicates no confidentiality or integrity impact, but a high availability impact. It also indicates that the impact scope may extend beyond the vulnerable component.