CVE-2026-84787

Summary

ZohoCorp ManageEngine OpManager and Firewall Analyzer versions 12.8.710 and below were vulnerable to a Privilege Escalation vulnerability that allowed an authenticated low-privilege user to gain Administrator privileges through Report Profile import.

Affected Software

VendorProductVersion RangeStatus
ZohocorpManageEngine OpManager0 < 12.8.711affected
ZohocorpManageEngine Firewall Analyzer0 < 12.8.711affected

Weaknesses

  • CWE-250: CWE-250 Execution with unnecessary privileges

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: total

References