CVE-2026-90464
CVE-2026-90464 · Fireware OS Missing Command Validation allows Authenticated Arbitrary File Modification as Root
Esta página presenta datos de fuentes públicas de vulnerabilidades. Consulta el aviso original antes de actualizar.
An external control of file path vulnerability in a WatchGuard Fireware OS firewall diagnostic command allows a remote, authenticated attacker with at least read-only (Device Monitor) privileges and access to the management CLI to create, truncate, or overwrite arbitrary files and modify kernel parameters with root privileges by submitting a specially crafted command. Written content is limited to numeric values.
CVSS 7.2 · Alta · EPSS 0,4% · Corrección disponible
- Publicación
- Actualización
Productos y versiones afectados
fireware os
- Versiones
- ≥ 2025.1, < 2026.4: Afectada (custom)
- ≥ 12.0, < 12.12.4: Afectada (custom)
Actualiza a 12.12.4; Actualiza a 2026.4
fireware os
- Versiones
- ≥ 12.0, < 12.5.22: Afectada (custom)
Actualiza a 12.5.22