# CVE-2026-3182: Zohocorp ManageEngine Endpoint Central cleartext transmission of mail data

Source: https://junglewise.ai/threats/cve-2026-3182-zohocorp-manageengine-endpoint-central-cleartext-transmission-of  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-07-21. Updated: 2026-07-21  
License: CC BY 4.0 with a link back

CVE-2026-3182 · Severity: medium · CVSS 4.3 · Published 2026-07-21

ManageEngine Endpoint Central, a tool used by IT departments to manage and secure corporate devices, contains a flaw in how it handles email server settings. Under specific conditions, an administrative user could view sensitive mail configuration data created by other administrators because the information is transmitted or stored insecurely. This could lead to the exposure of service credentials or internal mail server details to unauthorized staff members.

Vendors: [ManageEngine](https://junglewise.ai/threats/vendors/manageengine).

## Quick answers

**Is CVE-2026-3182 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-3182 being exploited in the wild.

**How severe is CVE-2026-3182?** Medium severity, with a CVSS score of 4.3, published 21 July 2026.

**Which products and versions are affected?** ManageEngine Endpoint Central before 11.4.2528.34; before 11.5.2600.13.

**Is there a fix for CVE-2026-3182?** A patch was published on 2026-01-23: Fixed builds released. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

**How is CVE-2026-3182 attacked?** It is attacked over the network, in a network appliance.

**Am I affected by CVE-2026-3182?** Check whether you run ManageEngine Endpoint Central at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

A vulnerability classified as CWE-319 (Cleartext Transmission of Sensitive Information) exists in ManageEngine Endpoint Central. When basic authentication is configured for external mail service integrations, administrative users may be able to access configuration data created by other administrators that should otherwise be restricted. The issue stems from the insecure handling of sensitive mail service information during transmission or within the administrative interface. Exploitation requires network access and at least low-level administrative privileges. The vendor has released patches in versions 11.4.2528.34 and 11.5.2600.13 to address this behavior.

## Affected products

- Zohocorp ManageEngine Endpoint Central before 11.4.2528.34; before 11.5.2600.13

## Timeline

- 2026-01-23: patched: Fixed builds released.
- 2026-07-21: disclosed: CVE published.

## References

- [https://www.manageengine.com/products/desktop-central/mail-configuration-data.html](https://www.manageengine.com/products/desktop-central/mail-configuration-data.html)