CVE-2026-84791

ZohoCorp ManageEngine OpManager and Firewall Analyzer versions 12.8.710 and below were vulnerable to a Broken Access Control vulnerability that allowed an authenticated low-privilege user to modify Change Management report schedule configurations for firewalls outside their assigned scope.

Score
CVSS 3.1 7.1 High
Status
Awaiting Analysis - 0fc0942c-577d-436f-ae8e-945763c79b02
Published
2026-09-23
Last modified
2026-09-23
Weaknesses
CWE-639

Affected products

References