CVE-2026-76980: Data Exposure vulnerability
Published Sep 23, 2026
·Updated
ZohoCorp ManageEngine OpManager and Firewall Analyzer versions 12.8.709 and below were vulnerable to a Data Exposure vulnerability in the Firewall Analyzer syslog collector.
Affected Software
2 affected components
Zohocorp ManageEngine OpManager<=12.8.709
Zohocorp Manageengine Firewall Analyzer<=12.8.709
Event History
Sep 23, 2026
CVE Published
via MITRE·12:08 PM
Data Sourced
via MITRE·12:08 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·01:17 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Which installations should be prioritized for remediation?
ManageEngine OpManager and Firewall Analyzer installations running version 12.8.709 or earlier are affected.
2
Does exploitation require an authenticated account or user interaction?
No. The supplied CVSS vector indicates no privileges and no user interaction are required, but the attacker must have adjacent-network access.
3
What is the expected security impact?
The vulnerability has high confidentiality impact and no indicated integrity or availability impact. The CVSS vector also indicates that the impact can extend beyond the vulnerable component's security scope.