CVE-2026-93865

Status: Received

Description

A missing authentication vulnerability in the Fireware OS FireCluster synchronization daemon allows a remote, unauthenticated attacker to invoke privileged system-level administrative actions by sending a specially crafted request to the FireCluster management IP when the clustering feature is enabled.

Published
October 27, 2026 4:17 PM
Last Modified
October 27, 2026 4:17 PM
Source
5d1c2695-1a31-4499-88ae-e847036fd7e3

Weaknesses (CWE)

CWE-77 CWE-306 CWE-862

References

Contact Us

Get the CyboWatch SIEM platform, hosting, and 24×7 SOC analysts. Send an enquiry, or call or email us to get started.

Send an enquiry