Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Release: ZohoCorp ManageEngine Firewall Analyzer, ManageEngine OpManager 12.8.710 Clear all filters
TI-2026-53766 CVE-2026-76978 · GHSA-pp7f-fwgf-7wx9

Command injection in Zohocorp ManageEngine OpManager

Priority MEDIUM 51

ZohoCorp ManageEngine OpManager and Firewall Analyzer versions 12.8.709 and below were vulnerable to a Command Injection vulnerability in the Diagnose Settings feature.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.08146 Published 2026-09-23 Fixed in 12.8.710 CWE-78
TI-2026-53767 CVE-2026-76979 · GHSA-mg98-g3r4-7whw

XML injection in Zohocorp ManageEngine OpManager

Priority LOW 38

ZohoCorp ManageEngine OpManager and Firewall Analyzer versions 12.8.709 and below were vulnerable to an XML Injection vulnerability in the Rule Tracking Compare Policies feature.

CVSS 3.1HIGH 7.7 Network Low privileges No interaction EPSS 0.0207 Published 2026-09-23 Fixed in 12.8.710 CWE-91
TI-2026-53768 CVE-2026-76980 · GHSA-7m5q-6phf-ch5p

Data exposure in Zohocorp ManageEngine OpManager

Priority LOW 34

ZohoCorp ManageEngine OpManager and Firewall Analyzer versions 12.8.709 and below were vulnerable to a Data Exposure vulnerability in the Firewall Analyzer syslog collector.

CVSS 3.1HIGH 7.4 Adjacent network No auth No interaction EPSS 0.00834 Published 2026-09-23 Fixed in 12.8.710 CWE-20