Is CVE-2026-84791 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-84791?

CVE-2026-84791 has a CVSS v3 severity of HIGH (7.1).

Back

CVE-2026-84791

Description

ZohoCorp ManageEngine OpManager and Firewall Analyzer versions 12.8.710 and below were vulnerable to a Broken Access Control vulnerability that allowed an authenticated low-privilege user to modify Change Management report schedule configurations for firewalls outside their assigned scope.