CVE-2026-90465

A missing authentication vulnerability in the FireCluster Sync processing of Fireware OS allows an attacker to achieve privilege escalation . By sending a specially crafted request, an attacker positioned on the cluster interconnect—such as a compromised cluster peer or an on-path network attacke...

CVE-2026-90465 Fireware OS Missing Authentication in FireCluster Sync Allows Privilege Escalation

A missing authentication vulnerability in the FireCluster Sync processing allows an attacker positioned on the cluster interconnect, such as a compromised cluster peer or an on-path network attacker, to invoke privileged firewall management actions as root by sending a specially crafted request...

EUVD-2026-111146

A missing authentication vulnerability in the FireCluster Sync processing allows an attacker positioned on the cluster interconnect, such as a compromised cluster peer or an on-path network attacker, to invoke privileged firewall management actions as root by sending a specially crafted request...

CVE-2026-93862

An out-of-bounds read vulnerability exists in the FireCluster Sync processing of Fireware OS . An attacker positioned on the cluster interconnect, such as a compromised cluster peer or an on-path network attacker, can send specially crafted network traffic to repeatedly crash the firewall's clust...

CVE-2026-93862 Fireware OS Out-of-Bounds Read in FireCluster Sync Allows Denial of Service

An out-of-bounds read vulnerability in the FireCluster Sync processing allows an attacker positioned on the cluster interconnect, such as a compromised cluster peer or an on-path network attacker, to repeatedly crash the firewall's cluster synchronization process by sending specially crafted...

EUVD-2026-111147

An out-of-bounds read vulnerability in the FireCluster Sync processing allows an attacker positioned on the cluster interconnect, such as a compromised cluster peer or an on-path network attacker, to repeatedly crash the firewall's cluster synchronization process by sending specially crafted...

CVE-2026-93865

A missing authentication vulnerability in the Fireware OS FireCluster synchronization daemon allows a remote, unauthenticated attacker to perform privileged system-level administrative actions . This occurs when the clustering feature is enabled and an attacker sends a specially crafted request t...

CVE-2026-93865 Fireware OS Missing Authentication in FireCluster Sync Daemon Allows Remote Root Action Injection

A missing authentication vulnerability in the Fireware OS FireCluster synchronization daemon allows a remote, unauthenticated attacker to invoke privileged system-level administrative actions by sending a specially crafted request to the FireCluster management IP when the clustering feature is...