- Products & ServicesProducts & Services
- SolutionsSolutions
- PricingPricing
- CompanyCompany
- ResourcesResources
en
en
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
A short verification protects source data and prevents automated AI requests.
Verifying...
As of 11/07/2026, ManageEngine OpManager recorded 11 security vulnerabilities in the last 90 days, of which 11 are rated High or Critical. None of these vulnerabilities is actively exploited (KEV) according to CISA's catalog. CyStack recommends that organizations and individual users apply patches as soon as possible.
CyStack does not yet have sufficient official-source data to identify the latest version of ManageEngine OpManager and determine which vulnerabilities affect that version.
CVE-2026-84791Broken Access Control vulnerabilityCVE-2026-84789Broken Access Control vulnerabilityCVE-2026-84787Privilege Escalation vulnerabilityCVE-2026-76980Data Exposure vulnerabilityCVE-2026-76979XML Injection vulnerability| Vulnerability | Exploitation status | Fix | Published | Severity |
|---|---|---|---|---|
CVE-2026-84791Broken Access Control vulnerability | Exploitation statusNot exploited | FixYes | Published09/23/2026 | SeverityHigh |
CVE-2026-84789Broken Access Control vulnerability | Exploitation statusNot exploited | FixYes | Published09/23/2026 | SeverityHigh |
CVE-2026-84787Privilege Escalation vulnerability | Exploitation statusNot exploited | FixYes | Published09/23/2026 | SeverityHigh |
CVE-2026-76980Data Exposure vulnerability | Exploitation statusNot exploited | FixYes | Published09/23/2026 | SeverityHigh |
CVE-2026-76979XML Injection vulnerability | Exploitation statusNot exploited | FixYes | Published09/23/2026 | SeverityHigh |
CVE-2026-76978Command Injection vulnerability | Exploitation statusNot exploited | FixYes | Published09/23/2026 | SeverityHigh |
CVE-2026-75825Authentication Bypass vulnerability | Exploitation statusNot exploited | FixYes | Published09/23/2026 | SeverityHigh |
CVE-2026-19599Remote Code Execution vulnerability | Exploitation statusNot exploited | FixYes | Published09/23/2026 | SeverityCritical |
CVE-2026-15358Path Traversal Vulnerability | Exploitation statusNot exploited | FixYes | Published09/23/2026 | SeverityHigh |
CVE-2026-14913SQL Injection vulnerability | Exploitation statusNot exploited | FixYes | Published09/23/2026 | SeverityHigh |
CVE-2026-12370Remote Code Execution Vulnerability | Exploitation statusNot exploited | FixYes | Published09/23/2026 | SeverityHigh |
CVE-2025-9226Stored XSS | Exploitation statusNot exploited | FixYes | Published01/30/2026 | SeverityMedium |
CVE-2025-9227Stored XSS | Exploitation statusNot exploited | FixYes | Published11/11/2025 | SeverityMedium |
13 Results | Page 1 of 1