High · 8.8 CVE-2026-14913 EUVD-2026-85233GHSA-prpv-x87v-q3xv

SQL Injection vulnerability

Published Sep 23, 2026 · Updated Sep 24, 2026 · Assigned by Zohocorp

Vendor: Zohocorp Product: ManageEngine Firewall Analyzer Product: ManageEngine OpManager

Description

ZohoCorp ManageEngine OpManager and Firewall Analyzer versions 12.8.669 and below were vulnerable to an SQL Injection vulnerability in Rule Management Search Reports.

Affected products

Vendor	Product	Affected	Fixed
Zohocorp	ManageEngine OpManager	< 12.8.670	12.8.670
Zohocorp	ManageEngine Firewall Analyzer	< 12.8.670	12.8.670

References

https://www.manageengine.com/itom/advisory/cve-2026-14913.html