CVE-2026-104381
Fireware OS Missing Authentication in FireCluster State Sync Allows BOVPN Tunnel Denial of Service
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
A missing authentication vulnerability in Fireware OS's FireCluster state synchronization feature allows an unauthenticated attacker positioned on the cluster synchronization network segment to force premature VPN tunnel termination by sending crafted cluster synchronization traffic.
| CWE | CWE-294 CWE-306 CWE-345 |
| Vendor | watchguard |
| Product | fireware os |
| Published | Oct 27, 2026 |
Stay Ahead of the Next One
Get instant alerts for watchguard fireware os
Be the first to know when new unknown vulnerabilities affecting watchguard fireware os are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
WatchGuard / Fireware OS
2025.1 < 2026.4 12.0 < 12.12.4
WatchGuard / Fireware OS
12.0 < 12.5.22
References
Credits
WatchGuard AI Security Research