CVE-2026-76978

ZohoCorp ManageEngine OpManager and Firewall Analyzer versions 12.8.709 and earlier are susceptible to a command injection vulnerability in the Diagnose Settings feature, allowing attackers to execute arbitrary commands on the server. This high-severity flaw (CVSS 8.8) poses significant risks, including unauthorized access and potential system compromise. Organizations using these affected products should prioritize immediate patching to mitigate potential exploitation.