CVE-2026-76979

7.7 highEPSS 2.1%

High (7.7). EPSS 2.1% chance of exploitation in the next 30 days.

ZohoCorp ManageEngine OpManager and Firewall Analyzer versions 12.8.709 and below were vulnerable to an XML Injection vulnerability in the Rule Tracking Compare Policies feature.

Severity

CVSS 3.1

7.7 high

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

EPSS: 2.1% chance of exploitation in the next 30 days; higher than 81% of CVEs (scores of 2026-10-31)
CWE: CWE-91
Published: 2026-09-23
Modified: 2026-09-23
Record from: the NVD, synced 2026-10-19

References

https://www.manageengine.com/itom/advisory/cve-2026-76979.html

Check your stack JSON