High · 7.7 CVE-2026-76979 EUVD-2026-85266GHSA-mg98-g3r4-7whw

XML Injection vulnerability

Published Sep 23, 2026 · Updated Sep 23, 2026 · Assigned by Zohocorp

Vendor: Zohocorp Product: ManageEngine Firewall Analyzer Product: ManageEngine OpManager

Description

ZohoCorp ManageEngine OpManager and Firewall Analyzer versions 12.8.709 and below were vulnerable to an XML Injection vulnerability in the Rule Tracking Compare Policies feature.

Affected products

Vendor	Product	Affected	Fixed
Zohocorp	ManageEngine OpManager	< 12.8.710	12.8.710
ZohoCorp	ManageEngine Firewall Analyzer	< 12.8.710	12.8.710

References

https://www.manageengine.com/itom/advisory/cve-2026-76979.html