CVE-2026-76979 — XML Injection vulnerability

CVE-2026-76979

XML Injection vulnerability PUBLISHED

Description (CNA)

ZohoCorp ManageEngine OpManager and Firewall Analyzer versions 12.8.709 and below were vulnerable to an XML Injection vulnerability in the Rule Tracking Compare Policies feature.

Affected (CNA)

Vendor / product	Versions
Zohocorp / ManageEngine OpManager	affected 0 before 12.8.710
ZohoCorp / ManageEngine Firewall Analyzer	affected 0 before 12.8.710

CWE

CWE-91

References

https://www.manageengine.com/itom/advisory/cve-2026-76979.html

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.