Veille CVE

Mardi 6 octobre 2026

3 CVE

  1. CVE-2026-86104 7.5 Élevée

    WatchGuard Fireware OS · Watchguard fireware

    An uncontrolled resource consumption vulnerability in the Fireware OS login process (wgagent) allows a remote, unauthenticated attacker to cause a denial of service by sending a specially crafted request.

  2. CVE-2026-86136 8.1 Élevée

    WatchGuard Fireware OS · Watchguard fireware

    A missing authorization vulnerability in the wgagent management daemon's session initialization function allows an authenticated, low-privileged user (including a read-only or guest administrator account) to crash the wgagent process and read arbitrary files accessible to the daemon by submitting a specially crafted management API request.

  3. CVE-2026-90441 8.1 Élevée

    WatchGuard Fireware OS · Watchguard fireware

    A missing authorization vulnerability in the wgagent management daemon's session initialization function allows an authenticated, low-privileged user (including a read-only or guest administrator account) to crash the wgagent process and read arbitrary files accessible to the daemon by submitting a specially crafted management API request.