CVE-2026-93865
WatchGuard Fireware OS
Medium priority: severe, but no known exploitation
A missing authentication vulnerability in the Fireware OS FireCluster synchronization daemon allows a remote, unauthenticated attacker to invoke privileged system-level administrative actions by sending a specially crafted request to the FireCluster management IP when the clustering feature is enabled.
In the news
- Múltiples vulnerabilidades en Fireware OS de WatchGuard · INCIBE-CERT