Critical Vulnerability in ManageEngine Desktop Central

ManageEngine released security patches for CVE-2021-44757, a critical authentication bypass in Desktop Central and Desktop Central MSP that can enable unauthorized data access or arbitrary zip file writes. Arctic Wolf recommends immediate patching (prioritizing public-facing servers), following ManageEngine hardening guidance, and monitoring intelligence sources; no PoC or confirmed exploitation was reported at the time.