CVE-2026-76979

Published: Sep 23, 2026Modified: Sep 23, 2026

7.7

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

Exploitability: 3.1 / Impact: 4.0

Source: 0fc0942c-577d-436f-ae8e-945763c79b02 (Secondary)

Description

ZohoCorp ManageEngine OpManager and Firewall Analyzer versions 12.8.709 and below were vulnerable to an XML Injection vulnerability in the Rule Tracking Compare Policies feature.

Related CWEs

CWE-91

XML Injection (aka Blind XPath Injection)

The product does not properly neutralize special elements that are used in XML, allowing attackers to modify the syntax, content, or commands of the XML before it is processed by an end system.

References (1)

https://www.manageengine.com/itom/advisory/cve-2026-76979.html

Source: 0fc0942c-577d-436f-ae8e-945763c79b02

Timeline

No history available yet.