CVE-2026-93862highCWE-125CWE-129CWE-787CWE-823

CVE-2026-93862: falha de alta gravidade em WatchGuard Fireware OS

Fireware OS Out-of-Bounds Read in FireCluster Sync Allows Denial of Service

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar Fireware OS

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

21Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 7.2epss 0.2%
An out-of-bounds read vulnerability in the FireCluster Sync processing allows an attacker positioned on the cluster interconnect, such as a compromised cluster peer or an on-path network attacker, to repeatedly crash the firewall's cluster synchronization process by sending specially crafted network traffic, resulting in a sustained denial of service.
CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N
Produtos afetados
WatchGuard · Fireware OS
CVEs relacionadas — WatchGuard Fireware OS

No mesmo produto, das mais perigosas para as menos.

CVE-2025-9242CRITICALWatchGuard Firebox iked Out of Bounds Write VulnerabilityEPSS 92.2%KEVCVE-2025-14733CRITICALWatchGuard Firebox iked Out of Bounds Write VulnerabilityEPSS 29.4%KEVCVE-2026-3342HIGHWatchGuard Firebox Out of Bounds Write VulnerabilityEPSS 6.4%CVE-2022-31749MEDIUMAuthenticated arbitrary file read/write in WatchGuard Fireware OSEPSS 1.3%CVE-2024-5974HIGHFirebox Authenticated Buffer Overflow VulnerabilityEPSS 1.1%CVE-2026-13368CRITICALWatchGuard Firebox Race Condition and Use-After-Free in Mobile VPN with IKEv2 LDAP AuthenticationEPSS 0.9%