CVE-2026-76979 is an XML Injection vulnerability (CWE-91) affecting ZohoCorp ManageEngine OpManager and Firewall Analyzer versions up to 12.8.709. The flaw exists in the Rule Tracking Compare Policies feature, enabling an attacker with low privileges to inject malicious XML content, specifically blind XPath injection. This can result in unauthorized disclosure of sensitive information. The vulnerability is rated high severity with a CVSS 3.1 base score of 7.7, reflecting network attack vector, low attack complexity, low privileges required, no user interaction, and high confidentiality impact without integrity or availability impact.

An attacker with low privileges can exploit this XML Injection vulnerability to perform blind XPath injection attacks, potentially leading to unauthorized disclosure of sensitive information within the affected ManageEngine OpManager installations. There is no indication of integrity or availability impact. No known exploits are reported in the wild.

No explicit patch or remediation details are provided in the input data. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict access to the Rule Tracking Compare Policies feature to trusted users only and monitor for suspicious activity related to XML input handling.