Broken Access Control in ZohoCorp ManageEngine OpManager and Firewall Analyzer

CVE-2026-84791

What is CVE-2026-84791?

ZohoCorp's ManageEngine OpManager and Firewall Analyzer versions up to 12.8.710 are prone to a broken access control vulnerability. This issue permits authenticated users with low privileges to alter the Change Management report schedules for firewalls that are beyond their designated access scope, potentially leading to unauthorized changes and security risks. It is crucial for users to review their configurations and apply the necessary security measures to mitigate exploitation.

References