{"id":"CVE-2026-90465","published":"2026-10-27T16:17:31.640","lastModified":"2026-10-27T16:17:31.640","description":"A missing authentication vulnerability in the FireCluster Sync processing allows an attacker positioned on the cluster interconnect, such as a compromised cluster peer or an on-path network attacker, to invoke privileged firewall management actions as root by sending a specially crafted request.","cvssScore":null,"cvssSeverity":null,"cvssVector":null,"cwes":["CWE-77","CWE-290","CWE-306","CWE-862"],"vendors":[],"products":[],"references":[{"url":"https://psirt.watchguard.com/CVE-2026-90465","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":null}