OCTOBER 10, 2026
Live Feed
Back to database
Case File

CVE-2026-84787

HIGH · CVSS 8.1 EPSS 0.85%

Source: NVD + CISA KEV + EPSS · Published 2026-09-23 · Last synced 2026-10-10

CyberRota Analysis

AI-Generated

ZohoCorp ManageEngine OpManager and Firewall Analyzer versions 12.8.710 and earlier are susceptible to a privilege escalation vulnerability, enabling authenticated low-privilege users to elevate their access to Administrator status via the Report Profile import feature. This flaw poses a significant security risk, as it could allow unauthorized users to manipulate system settings and access sensitive data. Organizations using these affected products should prioritize immediate remediation to mitigate potential exploitation.

CVE
CVE-2026-84787
Severity
HIGH
CVSS
8.1
EPSS
0.85%

Original NVD Description

ZohoCorp ManageEngine OpManager and Firewall Analyzer versions 12.8.710 and below were vulnerable to a Privilege Escalation vulnerability that allowed an authenticated low-privilege user to gain Administrator privileges through Report Profile import.