{"id":"CVE-2026-93865","published":"2026-10-27T16:17:32.843","lastModified":"2026-10-27T16:17:32.843","description":"A missing authentication vulnerability in the Fireware OS FireCluster synchronization daemon allows a remote, unauthenticated attacker to invoke privileged system-level administrative actions by sending a specially crafted request to the FireCluster management IP when the clustering feature is enabled.","cvssScore":null,"cvssSeverity":null,"cvssVector":null,"cwes":["CWE-77","CWE-306","CWE-862"],"vendors":[],"products":[],"references":[{"url":"https://psirt.watchguard.com/CVE-2026-93865","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":null}