Is CVE-2026-14913 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-14913 being exploited in the wild.

How severe is CVE-2026-14913?

High severity, with a CVSS score of 8.8, published 23 September 2026.

Which products and versions are affected?

Zoho Firewall Analyzer 12.8.669 and below, 12.8.676 to 12.8.708, 12.9.000 to 12.9.105; Zoho OpManager 12.8.669 and below; Zoho OpManager Enterprise Edition 12.8.669 and below; Zoho OpManager Nexus 12.8.718 to 12.8.736; and 1 more.

Is there a fix for CVE-2026-14913?

A patch was published on 2026-07-06: OpManager and OpManager Nexus Enterprise Edition patch released Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

How is CVE-2026-14913 attacked?

It is attacked over the network, in a web application.

Am I affected by CVE-2026-14913?

Check whether you run Zoho Firewall Analyzer, Zoho OpManager, Zoho OpManager Enterprise Edition or one of the others listed at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-14913: Zoho ManageEngine OpManager SQL injection in Rule Management Search Reports

CVE-2026-14913 · Severity: high · CVSS 8.8 · Published 2026-09-23

Zoho ManageEngine OpManager and Firewall Analyzer are network monitoring and management tools. Versions 12.8.669 and below contain an SQL injection vulnerability in the Rule Management Search Reports feature that could allow an attacker to execute arbitrary SQL queries and gain unauthorized access to sensitive data stored in the application database.

Vendors: Zoho.

Quick answers

Is CVE-2026-14913 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-14913 being exploited in the wild.
How severe is CVE-2026-14913?: High severity, with a CVSS score of 8.8, published 23 September 2026.
Which products and versions are affected?: Zoho Firewall Analyzer 12.8.669 and below, 12.8.676 to 12.8.708, 12.9.000 to 12.9.105; Zoho OpManager 12.8.669 and below; Zoho OpManager Enterprise Edition 12.8.669 and below; Zoho OpManager Nexus 12.8.718 to 12.8.736; and 1 more.
Is there a fix for CVE-2026-14913?: A patch was published on 2026-07-06: OpManager and OpManager Nexus Enterprise Edition patch released Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.
How is CVE-2026-14913 attacked?: It is attacked over the network, in a web application.
Am I affected by CVE-2026-14913?: Check whether you run Zoho Firewall Analyzer, Zoho OpManager, Zoho OpManager Enterprise Edition or one of the others listed at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

An SQL injection vulnerability exists in the Rule Management Search Reports component of OpManager and Firewall Analyzer versions 12.8.669 and below. The vulnerability allows attackers to inject malicious SQL commands through user-supplied input, potentially leading to unauthorized database access and data exfiltration. Patches are available in OpManager 12.8.670+, Firewall Analyzer 12.8.709+, OpManager Nexus 12.8.737+, and versions 12.9.106+.

Affected products

Zoho OpManager 12.8.669 and below
Zoho OpManager Enterprise Edition 12.8.669 and below
Zoho OpManager Nexus 12.8.718 to 12.8.736
Zoho OpManager Nexus Enterprise Edition 12.8.718 to 12.8.736
Zoho Firewall Analyzer 12.8.669 and below, 12.8.676 to 12.8.708, 12.9.000 to 12.9.105

Timeline

2026-09-23: disclosed
2026-07-06: patched: OpManager and OpManager Nexus Enterprise Edition patch released

References

https://www.manageengine.com/itom/advisory/cve-2026-14913.html

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.