CVE-2026-93865

WatchGuard Fireware OS

Prioridad media: es grave, pero no se conoce explotación

A missing authentication vulnerability in the Fireware OS FireCluster synchronization daemon allows a remote, unauthenticated attacker to invoke privileged system-level administrative actions by sending a specially crafted request to the FireCluster management IP when the clustering feature is enabled.

En las noticias

• Múltiples vulnerabilidades en Fireware OS de WatchGuard · INCIBE-CERT