CVE-2026-90441

A missing authorization vulnerability in the wgagent management daemon's session initialization function allows an authenticated, low-privileged user…

Fireware

A missing authorization vulnerability in the wgagent management daemon's session initialization function allows an authenticated, low-privileged user (including a read-only or guest administrator account) to crash the wgagent process and read arbitrary files accessible to the daemon by submitting a specially crafted management API request.

30. Sep 2026

Ausgewertete Quellen

• Hersteller
  https://psirt.watchguard.com/CVE-2026-90441
• NVD
  CVE-2026-90441