CVE-2026-93434Fireware OS XPath Injection in SSH Authentication Allows Blind Extraction of Configuration Secrets

Descripción

An XPath injection vulnerability in WatchGuard Fireware OS's SSH authentication process allows a remote, unauthenticated attacker with access to the management SSH interface to extract sensitive configuration data by submitting a specially crafted request.

Datos: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Se publican tal como los indican las fuentes, en inglés.

Productos y versiones afectados

Referencias y parches

• https://psirt.watchguard.com/CVE-2026-93434 vendor-advisory