CVE-2026-84791 | BDVDB-2026-378213 Detail
ZohocorpManageEngine OpManager
Description#
ZohoCorp ManageEngine OpManager and Firewall Analyzer versions 12.8.710 and below were vulnerable to a Broken Access Control vulnerability that allowed an authenticated low-privilege user to modify Change Management report schedule configurations for firewalls outside their assigned scope.
Impact#
CAPEC-1 Accessing Functionality Not Properly Constrained by ACLs
Weaknesses#
- CWE-639 Authorization Bypass Through User-Controlled Key
References#
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.