CVE-2026-76978: Zohocorp ManageEngine Firewall Analyzer

High severity, CVSS 8.8. EPSS: 3.7% chance of exploitation in the next 30 days.

ZohoCorp ManageEngine OpManager and Firewall Analyzer versions 12.8.709 and below were vulnerable to a Command Injection vulnerability in the Diagnose Settings feature.

Affected products

• Zohocorp ManageEngine Firewall Analyzer: before 12.8.710 (fixed in 12.8.710)
• Zohocorp ManageEngine Opmanager: before 12.8.710 (fixed in 12.8.710)

Published 2026-09-23. Last modified 2026-09-24.