Skip to content
OpenAdvisories
High · 7.2 CVE-2026-93862 EUVD-2026-111147GHSA-vq3j-9jcw-wpfh

Fireware OS Out-of-Bounds Read in FireCluster Sync Allows Denial of Service

Published Oct 27, 2026 · Updated Oct 29, 2026 · Assigned by WatchGuard

Description

An out-of-bounds read vulnerability in the FireCluster Sync processing allows an attacker positioned on the cluster interconnect, such as a compromised cluster peer or an on-path network attacker, to repeatedly crash the firewall's cluster synchronization process by sending specially crafted network traffic, resulting in a sustained denial of service.

Affected products

VendorProductAffectedFixed
WatchGuard Fireware OS 2025.1 – < 2026.4, 12.0 – < 12.12.4, 12.0 – < 12.5.22 2026.4

Advisories 1

References