Security Updates -CVE-2026-14913 | ManageEngine Firewalll Analyzer

SQL Injection vulnerability in Rule Management Search Reports- CVE-2026-14913

Severity: High

Product Name	Affected Version(s)	Fixed Version(s)	Fixed On
OpManager OpManager Enterprise Edition OpManager Nexus OpManager Nexus Enterprise Edition Firewall Analyzer	12.8.669 and Below	12.8.670 and above (check steps to upgrade)	06-07-2026
	12.8.669 to 12.8.736	12.8.737 and above	06-07-2026
	12.9.000 to 12.9.105	12.9.106 and above(contact support)	03-07-2026

Details:

Previously, an SQL injection vulnerability was identified in Rule Management Search Reports. This issue has now been fixed.

Steps to upgrade:

Kindly download the latest upgrade pack from the following links for the respective products:
- OpManager: https://www.manageengine.com/network-monitoring/service-packs.html
- OpManager Nexus: https://www.manageengine.com/it-operations-management/service-packs.html
- Firewall Analyzer: https://www.manageengine.com/products/firewall/service-packs.html
Apply the latest build to your existing product installation as per the upgrade pack instructions provided in the above links.

Source and Acknowledgements

This vulnerability was reported by NGOC HIEU.

Kindly contact our product support team for further details, at the below mentioned email address: