CVE-2026-84789 — Broken Access Control vulnerability

CVE-2026-84789

Broken Access Control vulnerability PUBLISHED

Description (CNA)

ZohoCorp ManageEngine OpManager and Firewall Analyzer versions 12.8.710 and below were vulnerable to a Broken Access Control vulnerability that allowed an authenticated low-privilege user to create alert notifications for firewalls outside their assigned scope.

Affected (CNA)

Vendor / product	Versions
Zohocorp / ManageEngine OpManager	affected 0 before 12.8.711
Zohocorp / ManageEngine Firewall Analyzer	affected 0 before 12.8.711

CWE

CWE-639

References

https://www.manageengine.com/itom/advisory/cve-2026-84789.html

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.