CVE-2026-76980 Data Exposure vulnerability
Attackers can expose sensitive data via the Firewall Analyzer syslog collector in ManageEngine OpManager and Firewall Analyzer.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2026-76980?
CVE-2026-76980 is a high-severity vulnerability in Zohocorp ManageEngine Firewall Analyzer, published on 23 Sep 2026. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
ZohoCorp ManageEngine OpManager and Firewall Analyzer versions 12.8.709 and below were vulnerable to a Data Exposure vulnerability in the Firewall Analyzer syslog collector.
Weakness: CWE-20
Which versions are affected by CVE-2026-76980?
How do I fix CVE-2026-76980?
No fix has been published for CVE-2026-76980 yet. Limit exposure of the affected software until one is available.
Is CVE-2026-76980 being exploited?
There is no known exploitation of CVE-2026-76980 in the wild and no public exploit code.
Sources
Also known as GHSA-7m5q-6phf-ch5p.