7.4
CVE-2026-76980
- EPSS 0.39%
- Veröffentlicht 23.09.2026 12:08:24
- Zuletzt bearbeitet 23.09.2026 18:17:31
- Erkennungen
Data Exposure vulnerability
ZohoCorp ManageEngine OpManager and Firewall Analyzer versions 12.8.709 and below were vulnerable to a Data Exposure vulnerability in the Firewall Analyzer syslog collector.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerZohocorp
≫
Produkt
ManageEngine OpManager
Default Statusunaffected
Version
0
Version <
12.8.710
Status
affected
HerstellerZohocorp
≫
Produkt
ManageEngine Firewall Analyzer
Default Statusunaffected
Version
0
Version <
12.8.710
Status
affected
VulnDex Vulnerability Enrichment
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.39% | 0.308 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| 0fc0942c-577d-436f-ae8e-945763c79b02 | 7.4 | 2.8 | 4 |
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
|
CWE-20 Improper Input Validation
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.
https://www.manageengine.com/itom/advisory/cve-2026-76980.html