High · 8.8 CVE-2026-76978 EUVD-2026-85269GHSA-pp7f-fwgf-7wx9

Command Injection vulnerability

Published Sep 23, 2026 · Updated Sep 24, 2026 · Assigned by Zohocorp

Vendor: Zohocorp Product: ManageEngine Firewall Analyzer Product: ManageEngine OpManager

Description

ZohoCorp ManageEngine OpManager and Firewall Analyzer versions 12.8.709 and below were vulnerable to a Command Injection vulnerability in the Diagnose Settings feature.

Affected products

Vendor	Product	Affected	Fixed
Zohocorp	ManageEngine OpManager	< 12.8.710	12.8.710
ZohoCorp	ManageEngine Firewall Analyzer	< 12.8.710	12.8.710

References

https://www.manageengine.com/itom/advisory/cve-2026-76978.html