CVE-2026-76979 - Vulnerability Details - OpenCVE

ZohoCorp ManageEngine OpManager and Firewall Analyzer versions 12.8.709 and below were vulnerable to an XML Injection vulnerability in the Rule Tracking Compare Policies feature.

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required Low

Scope Changed

Confidentiality Impact High

Integrity Impact None

Availability Impact None

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable no

Technical Impact partial

Vendors	Products
Zohocorp	Manageengine Firewall Analyzer Manageengine Opmanager

No data.

No data.

References

Link	Providers
https://www.manageengine.com/itom/advisory/cve-2026-76979.html

History

Wed, 23 Sep 2026 17:30:00 +0000

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Wed, 23 Sep 2026 12:45:00 +0000

Type	Values Removed	Values Added
Description		ZohoCorp ManageEngine OpManager and Firewall Analyzer versions 12.8.709 and below were vulnerable to an XML Injection vulnerability in the Rule Tracking Compare Policies feature.
Title		XML Injection vulnerability
First Time appeared		Zohocorp Zohocorp manageengine Firewall Analyzer Zohocorp manageengine Opmanager
Weaknesses		CWE-91
CPEs		cpe:2.3:a:zohocorp:manageengine_firewall_analyzer:::::::: cpe:2.3:a:zohocorp:manageengine_opmanager::::::::
Vendors & Products		Zohocorp Zohocorp manageengine Firewall Analyzer Zohocorp manageengine Opmanager
References		https://www.manageengine.com/itom/advisory/cve-2026-76979.html
Metrics		cvssV3_1 `{'score': 7.7, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N'}`

MITRE

Status: PUBLISHED

Assigner: Zohocorp

Published: 2026-09-23T12:22:49.382Z

Updated: 2026-09-23T16:46:14.733Z

Reserved: 2026-08-20T06:00:53.815Z

Link: CVE-2026-76979

Vulnrichment

Updated: 2026-09-23T16:37:33.813Z

NVD

Status : Awaiting Analysis

Published: 2026-09-23T13:17:29.273

Modified: 2026-09-23T18:17:31.543

Link: CVE-2026-76979

Redhat

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-76979", "assignerOrgId": "0fc0942c-577d-436f-ae8e-945763c79b02", "state": "PUBLISHED", "assignerShortName": "Zohocorp", "dateReserved": "2026-08-20T06:00:53.815Z", "datePublished": "2026-09-23T12:22:49.382Z", "dateUpdated": "2026-09-23T16:46:14.733Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "0fc0942c-577d-436f-ae8e-945763c79b02", "shortName": "Zohocorp", "dateUpdated": "2026-09-23T12:22:49.382Z"}, "title": "XML Injection vulnerability", "problemTypes": [{"descriptions": [{"lang": "en", "cweId": "CWE-91", "description": "CWE-91 XML injection (aka blind XPath injection)", "type": "CWE"}]}], "impacts": [{"capecId": "CAPEC-250", "descriptions": [{"lang": "en", "value": "CAPEC-250 XML Injection"}]}], "affected": [{"vendor": "Zohocorp", "product": "ManageEngine OpManager", "versions": [{"status": "affected", "version": "0", "lessThan": "12.8.710", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "ZohoCorp", "product": "ManageEngine Firewall Analyzer", "versions": [{"status": "affected", "version": "0", "lessThan": "12.8.710", "versionType": "custom"}], "defaultStatus": "unaffected"}], "cpeApplicability": [{"operator": "OR", "nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:*:*:*:*:*:*:*:*", "versionStartIncluding": "0", "versionEndExcluding": "12.8.710"}]}, {"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:a:zohocorp:manageengine_firewall_analyzer:*:*:*:*:*:*:*:*", "versionStartIncluding": "0", "versionEndExcluding": "12.8.710"}]}]}], "descriptions": [{"lang": "en", "value": "ZohoCorp ManageEngine OpManager and Firewall Analyzer versions 12.8.709 and below were vulnerable to an XML Injection vulnerability in the Rule Tracking Compare Policies feature.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "ZohoCorp ManageEngine OpManager and Firewall Analyzer versions 12.8.709 and below were vulnerable to an XML Injection vulnerability in the Rule Tracking Compare Policies feature."}]}], "references": [{"url": "https://www.manageengine.com/itom/advisory/cve-2026-76979.html"}], "metrics": [{"format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}], "cvssV3_1": {"version": "3.1", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "LOW", "userInteraction": "NONE", "scope": "CHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "availabilityImpact": "NONE", "baseSeverity": "HIGH", "baseScore": 7.7, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N"}}], "source": {"discovery": "UNKNOWN"}, "x_generator": {"engine": "Vulnogram 1.0.5"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-76979", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-09-23T13:01:09.425453Z"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-09-23T16:46:14.733Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-76979", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-09-23T13:01:09.425453Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-09-23T16:37:33.813Z"}}], "cna": {"title": "XML Injection vulnerability", "source": {"discovery": "UNKNOWN"}, "impacts": [{"capecId": "CAPEC-250", "descriptions": [{"lang": "en", "value": "CAPEC-250 XML Injection"}]}], "metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "CHANGED", "version": "3.1", "baseScore": 7.7, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "Zohocorp", "product": "ManageEngine OpManager", "versions": [{"status": "affected", "version": "0", "lessThan": "12.8.710", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "ZohoCorp", "product": "ManageEngine Firewall Analyzer", "versions": [{"status": "affected", "version": "0", "lessThan": "12.8.710", "versionType": "custom"}], "defaultStatus": "unaffected"}], "references": [{"url": "https://www.manageengine.com/itom/advisory/cve-2026-76979.html"}], "x_generator": {"engine": "Vulnogram 1.0.5"}, "descriptions": [{"lang": "en", "value": "ZohoCorp ManageEngine OpManager and Firewall Analyzer versions 12.8.709 and below were vulnerable to an XML Injection vulnerability in the Rule Tracking Compare Policies feature.", "supportingMedia": [{"type": "text/html", "value": "ZohoCorp ManageEngine OpManager and Firewall Analyzer versions 12.8.709 and below were vulnerable to an XML Injection vulnerability in the Rule Tracking Compare Policies feature.", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-91", "description": "CWE-91 XML injection (aka blind XPath injection)"}]}], "cpeApplicability": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "12.8.710", "versionStartIncluding": "0"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:zohocorp:manageengine_firewall_analyzer:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "12.8.710", "versionStartIncluding": "0"}], "operator": "OR"}], "operator": "OR"}], "providerMetadata": {"orgId": "0fc0942c-577d-436f-ae8e-945763c79b02", "shortName": "Zohocorp", "dateUpdated": "2026-09-23T12:22:49.382Z"}}}, "cveMetadata": {"cveId": "CVE-2026-76979", "state": "PUBLISHED", "dateUpdated": "2026-09-23T16:46:14.733Z", "dateReserved": "2026-08-20T06:00:53.815Z", "assignerOrgId": "0fc0942c-577d-436f-ae8e-945763c79b02", "datePublished": "2026-09-23T12:22:49.382Z", "assignerShortName": "Zohocorp"}, "dataVersion": "5.2"}