CVE-2026-93865

Vulnerability Description

A missing authentication vulnerability in the Fireware OS FireCluster synchronization daemon allows a remote, unauthenticated attacker to invoke privileged system-level administrative actions by sending a specially crafted request to the FireCluster management IP when the clustering feature is enabled.

Related Weaknesses (CWE)

CWE-306 CWE-862 CWE-77

References

https://psirt.watchguard.com/CVE-2026-93865

FAQ

What is CVE-2026-93865?

CVE-2026-93865 is a documented vulnerability. A missing authentication vulnerability in the Fireware OS FireCluster synchronization daemon allows a remote, unauthenticated attacker to invoke privileged system-level administrative actions by sendi...

How severe is CVE-2026-93865?

CVSS scoring is not yet available for CVE-2026-93865. Check NVD for updates.

Is there a patch for CVE-2026-93865?

Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.