ZohoCorp OpMgr & FW Analyzer <12.8.710 Priv Esc via Report Profile Import
CVE-2026-84787 Published on September 23, 2026
Privilege Escalation vulnerability
ZohoCorp ManageEngine OpManager and Firewall Analyzer versions 12.8.710 and below were vulnerable to a Privilege Escalation vulnerability that allowed an authenticated low-privilege user to gain Administrator privileges through Report Profile import.
Vulnerability Analysis
CVE-2026-84787 can be exploited with network access, and requires small amount of user privileges. This vulnerability is considered to have a low attack complexity. The potential impact of an exploit of this vulnerability is considered to have a high impact on confidentiality and integrity, and no impact on availability.
Weakness Type
Execution with Unnecessary Privileges
The software performs an operation at a privilege level that is higher than the minimum level required, which creates new weaknesses or amplifies the consequences of other weaknesses.
Products Associated with CVE-2026-84787
stack.watch emails you whenever new vulnerabilities are published in Zoho Corp Manageengine Opmanager or Zoho Corp Manageengine Firewall Analyzer. Just hit a watch button to start following.
Affected Versions
Zohocorp ManageEngine OpManager:- Before 12.8.711 is affected.
- Before 12.8.711 is affected.