CVE-2026-76978

Summary

ZohoCorp ManageEngine OpManager and Firewall Analyzer versions 12.8.709 and below were vulnerable to a Command Injection vulnerability in the Diagnose Settings feature.

Affected Software

VendorProductVersion RangeStatus
ZohocorpManageEngine OpManager0 < 12.8.710affected
ZohoCorpManageEngine Firewall Analyzer0 < 12.8.710affected

Weaknesses

  • CWE-78: CWE-78 Improper neutralization of special elements used in an OS command ('OS command injection')

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: total

References