CVE-2026-104381

Vulnerability Description

A missing authentication vulnerability in Fireware OS's FireCluster state synchronization feature allows an unauthenticated attacker positioned on the cluster synchronization network segment to force premature VPN tunnel termination by sending crafted cluster synchronization traffic.

Related Weaknesses (CWE)

CWE-306 CWE-345 CWE-294

References

https://psirt.watchguard.com/CVE-2026-104381

FAQ

What is CVE-2026-104381?

CVE-2026-104381 is a documented vulnerability. A missing authentication vulnerability in Fireware OS's FireCluster state synchronization feature allows an unauthenticated attacker positioned on the cluster synchronization network segment to force ...

How severe is CVE-2026-104381?

CVSS scoring is not yet available for CVE-2026-104381. Check NVD for updates.

Is there a patch for CVE-2026-104381?

Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.