Broken Access Control in ZohoCorp ManageEngine OpManager and Firewall Analyzer
CVE-2026-84789

7.1HIGH

Key Information:

Vendor

Zohocorp
Status
Manageengine Opmanager
Manageengine Firewall Analyzer
Vendor
CVE Published:
23 September 2026

What is CVE-2026-84789?

A vulnerability in ZohoCorp's ManageEngine OpManager and Firewall Analyzer allows authenticated low-privilege users to create alert notifications for firewalls beyond their designated scope. This could lead to unauthorized access to network security information, potentially compromising the integrity of the firewall management and alerting processes.

Affected Version(s)

ManageEngine Firewall Analyzer 0 < 12.8.711

ManageEngine OpManager 0 < 12.8.711

References

https://www.manageengine.com/itom/advisory/cve-2026-84789...

CVSS V3.1

Score:
7.1
Severity:
HIGH
Confidentiality:
High
Integrity:
Low
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.