CVSS 6.0 (medium) · published 2026-10-27
A missing authentication vulnerability in Fireware OS's FireCluster state synchronization feature allows an unauthenticated attacker positioned on the cluster synchronization network segment to force premature VPN tunnel termination by sending crafted cluster synchronization traffic.
Weakness: CWE-294, CWE-306, CWE-345
Source: NVD CVE-2026-104381
Connect an AI agent to the FixLane MCP server or ask the Telegram bot to check what you have installed against incidents with a verified fixed version.