CVE-2026-104381

Status: Received

Description

A missing authentication vulnerability in Fireware OS's FireCluster state synchronization feature allows an unauthenticated attacker positioned on the cluster synchronization network segment to force premature VPN tunnel termination by sending crafted cluster synchronization traffic.

Published
October 27, 2026 4:17 PM
Last Modified
October 27, 2026 4:17 PM
Source
5d1c2695-1a31-4499-88ae-e847036fd7e3

Weaknesses (CWE)

CWE-294 CWE-306 CWE-345

References

Contact Us

Get the CyboWatch SIEM platform, hosting, and 24×7 SOC analysts. Send an enquiry, or call or email us to get started.

Send an enquiry