Vulnerability details
CVE-2026-14913
Zohocorp ManageEngine Firewall AnalyzerZohocorp ManageEngine OpManager
SQL Injection vulnerability
CVSS 3.1
8.8High
Official description
ZohoCorp ManageEngine OpManager and Firewall Analyzer versions 12.8.669 and below were vulnerable to an SQL Injection vulnerability in Rule Management Search Reports.
CVSS scores
| Score | Version | Source | Vector |
|---|---|---|---|
| 8.8High | 3.1 | CVEProject cvelistV5 (CNA) (Zohocorp) | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Affected products
| Vendor | Product | Versions | Source |
|---|---|---|---|
| Zohocorp | ManageEngine Firewall Analyzer | v < 12.8.670 | CVEProject cvelistV5 (CNA) |
| Zohocorp | ManageEngine OpManager | v < 12.8.670 | CVEProject cvelistV5 (CNA) |
References and advisories
1
Kolun on Telegram @kolunsec
Exploited CVEs, key news and a daily digest
Alerts for this product's next CVEsFollow the product to get new vulnerabilities on Telegram.
Details
- Published
- 2026-09-23
- Last updated
- 2026-09-24
- State
- Published
- Assigner (CNA)
- Zohocorp
Exploit prediction (EPSS)
2.49%
Probability of exploitation in 30 days
84.6%
Percentile (among all CVEs)
SSVC assessment (CISA)
- Automatable
- No
- Exploitation
- None
- Technical impact
- Total
Weaknesses (CWE)
- CWE-89Improper neutralization of special elements used in an SQL command ('SQL injection')