CVSS 8.7 (high) · published 2026-10-27
An XPath injection vulnerability in WatchGuard Fireware OS's SSH authentication process allows a remote, unauthenticated attacker with access to the management SSH interface to extract sensitive configuration data by submitting a specially crafted request.
Weakness: CWE-20, CWE-208, CWE-643
Source: NVD CVE-2026-93434
Connect an AI agent to the FixLane MCP server or ask the Telegram bot to check what you have installed against incidents with a verified fixed version.