CVE-2026-76979

ZohoCorp ManageEngine OpManager and Firewall Analyzer versions 12.8.709 and below were vulnerable to an XML Injection vulnerability in the Rule Tracking Compare Policies feature.

Score

CVSS 3.1 7.7 High

Status

Awaiting Analysis - 0fc0942c-577d-436f-ae8e-945763c79b02

Published

2026-09-23

Last modified

2026-09-23

Weaknesses

CWE-91

Affected products

• Manageengine Firewall Analyzer (Zohocorp)
• Manageengine Opmanager (Zohocorp)

References

• https://www.manageengine.com/itom/advisory/cve-2026-76979.html