CVE-2026-84787: Zohocorp ManageEngine Firewall Analyzer

High severity, CVSS 8.1. EPSS: 0.8% chance of exploitation in the next 30 days.

ZohoCorp ManageEngine OpManager and Firewall Analyzer versions 12.8.710 and below were vulnerable to a Privilege Escalation vulnerability that allowed an authenticated low-privilege user to gain Administrator privileges through Report Profile import.

Affected products

• Zohocorp ManageEngine Firewall Analyzer: before 12.8.711 (fixed in 12.8.711)
• Zohocorp ManageEngine Opmanager: before 12.8.711 (fixed in 12.8.711)

Published 2026-09-23. Last modified 2026-09-24.