CVE-2026-90465Fireware OS Missing Authentication in FireCluster Sync Allows Privilege Escalation

Descripción

A missing authentication vulnerability in the FireCluster Sync processing allows an attacker positioned on the cluster interconnect, such as a compromised cluster peer or an on-path network attacker, to invoke privileged firewall management actions as root by sending a specially crafted request.

Datos: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Se publican tal como los indican las fuentes, en inglés.

Productos y versiones afectados

Referencias y parches

• https://psirt.watchguard.com/CVE-2026-90465 vendor-advisory