CVE-2021-44515VulnerabilityPublished 12/10/2021Updated 10/24/2026

CVE-2021-44515: Zoho Desktop Central Authentication Bypass Vulnerability

Affects Zoho Desktop CentralSource CISA KEV

Severity

High

No CVSS score published yet

Exploitation: Actively exploited – in CISA KEV since 12/10/2021
KEV deadline: 12/24/2021
EPSS: 99.9% chance of exploitation in 30 days – higher than 99% of CVEs

What to do

CISA required action

Apply updates per vendor instructions.

nvd.nist.gov/vuln/detail/CVE-2021-44515 (opens in a new tab)

Description

Zoho Desktop Central contains an authentication bypass vulnerability (CVE-2021-44515) that allows an attacker to execute arbitrary code on the Desktop Central MSP server. This vulnerability has been exploited in the wild, indicating active attacks. No specific affected versions or patch information is provided in the available data.

Summary

CVE-2021-44515 is an authentication bypass vulnerability in Zoho Desktop Central that enables attackers to bypass authentication controls and execute arbitrary code on the Desktop Central MSP server. The vulnerability has been confirmed to be exploited in the wild. No vendor advisory or patch details are included in the provided information.

Impact

Successful exploitation of this vulnerability allows an attacker to bypass authentication and execute arbitrary code on the targeted Desktop Central MSP server, potentially leading to full system compromise. The presence of known exploitation in the wild increases the urgency and risk associated with this vulnerability.

Mitigation

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the Desktop Central MSP server and monitor for suspicious activity related to authentication bypass attempts.

What to do

Description

AnalysisAI-generated, updated 10/24/2026, 09:56:09 UTC

References

Related threats