CVE-2026-90464

An external control of file path vulnerability in a WatchGuard Fireware OS firewall diagnostic command allows a remote, authenticated attacker with at least read-only (Device Monitor) privileges and access to the management CLI to create, truncate, or overwrite arbitrary files and modify kernel parameters with root privileges by submitting a specially crafted command. Written content is limited to numeric values.

Score
CVSS 4.0 7.2 High
Status
Awaiting Analysis - 5d1c2695-1a31-4499-88ae-e847036fd7e3
Published
2026-10-27
Last modified
2026-10-28
Weaknesses
CWE-59, CWE-73, CWE-732

Affected products

References

 
 
© AVABIS GmbH privacypolicy about