CVE Feed

    Dashboard / CVE / CVE-2026-90465

    CVE-2026-90465

    A missing authentication vulnerability in the FireCluster Sync processing allows an attacker positioned on the cluster interconnect, such as a compromised cluster peer or an on-path network attacker, to invoke privileged firewall management actions as root by sending a specially crafted request.

    Published:Oct 27, 2026
    Last Modified:Oct 29, 2026
    EPS:Oct 27, 2026
    EPSS Score:0.00237
    CVSS Score:8.7

    Affected Products

    Vendor
    Watchguard
    Product
    Fireware Os

    Exploits

    No exploit reference

    Common Attack Pattern Enumeration and Classification (CAPEC)

    CAPEC-12 Choosing Message Identifier
    CAPEC-136 LDAP Injection
    CAPEC-15 Command Delimiters
    CAPEC-166 Force the System to Reset Values
    CAPEC-183 IMAP/SMTP Command Injection
    CAPEC-21 Exploitation of Trusted Identifiers
    CAPEC-216 Communication Channel Manipulation
    CAPEC-22 Exploiting Trust in Client
    CAPEC-248 Command Injection
    CAPEC-36 Using Unpublished Interfaces or Functionality
    CAPEC-40 Manipulating Writeable Terminal Devices
    CAPEC-43 Exploiting Multiple Input Interpretation Layers
    CAPEC-459 Creating a Rogue Certification Authority Certificate
    CAPEC-461 Web Services API Signature Forgery Leveraging Hash Function Extension Weakness
    CAPEC-473 Signature Spoof
    CAPEC-476 Signature Spoofing by Misrepresentation
    CAPEC-59 Session Credential Falsification through Prediction
    CAPEC-60 Reusing Session IDs (aka Session Replay)
    CAPEC-62 Cross Site Request Forgery
    CAPEC-665 Exploitation of Thunderbolt Protection Flaws
    CAPEC-667 Bluetooth Impersonation AttackS (BIAS)
    CAPEC-75 Manipulating Writeable Configuration Files
    CAPEC-76 Manipulating Web Input to File System Calls
    CAPEC-94 Adversary in the Middle (AiTM)

    Related CVEs

    CVE-2026-93862 (CVSS 7.2) — An out-of-bounds read vulnerability in the FireCluster Sync processing allows an attacker positioned on the cl…
    CVE-2026-112709 (CVSS 9.2) — A heap-based buffer overflow vulnerability in the Fireware OS authentication service allows an attacker who co…
    CVE-2026-90464 (CVSS 7.2) — An external control of file path vulnerability in a WatchGuard Fireware OS firewall diagnostic command allows …
    CVE-2026-103593 (CVSS 7.1) — A stack-based buffer overflow vulnerability in the Fireware OS logging service allows a network-adjacent attac…
    CVE-2026-113881 (CVSS 6.1) — A stack-based buffer overflow vulnerability in Fireware OS's VPN Network Access Enforcement process allows an …
    CVE-2026-93434 (CVSS 8.7) — An XPath injection vulnerability in WatchGuard Fireware OS's SSH authentication process allows a remote, unaut…
    CVE-2026-90442 (CVSS 8.6) — A stack-based buffer overflow vulnerability in the Fireware OS certd process allows an authenticated attacker …
    CVE-2026-112710 (CVSS 9.2) — A heap-based buffer overflow vulnerability exists in the Fireware OS authentication service allows an attacker…
    CVE-2026-82332 (CVSS 5.7) — An improper authentication vulnerability in WatchGuard Fireware OS's AuthPoint multi-factor authentication pro…
    CVE-2026-93857 (CVSS 9.2) — A stack-based buffer overflow vulnerability in Fireware OS's SIP proxy allows a remote, unauthenticated attack…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High