CVE-2026-14308
4.9MediumPublished 13 Oct 2026 · NVD status: Awaiting Analysis · AI triage by gemini-3.8-flash
- Attack vector
- Physical
- Complexity
- Low
- Privileges needed
- High
- User interaction
- None
- Impact
- High impact on availability
- Weakness
- CWE-20
Impact
Attackers with physical access and high administrative privileges can trigger a denial of service across the system. The impact is limited to crashing or disrupting availability via improper driver loading.
Root cause
The MEARWService service fails to properly validate driver signatures before processing them.
Affected systems
Zohocorp ManageEngine Malware Protection Plus versions before 1.0.64.12
CVSS v3.1 · CVSS:3.1/AV:P/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H
Fix & remediation
Upgrade ManageEngine Malware Protection Plus to version 1.0.64.12 or later. If patching immediately is not possible, restrict physical and local administrative access to the host.
AI-suggested. Run it in staging first and check it against the vendor advisory. Why?
NVD description
Zohocorp ManageEngine Malware Protection Plus versions before 1.0.64.12 are affected by insufficient driver signature validation in MEARWService.