CVE-2026-4266

Katalog CVE

CVSS 6.7 · Medium EPSS 0,39%

Kerentanan Deserialization of Untrusted Data pada watchguard fireware. Skor CVSS 3.1 6.7 (Medium) menurut NVD.

Deskripsi (NVD)

An Insecure Deserialization vulnerability in WatchGuard Fireware OS allows an attacker that has obtained write access to the local filesystem through another vulnerability to execute arbitrary code in the context of the portald user. Note, this vulnerability does not affect Firebox platforms that do not support the Access Portal feature, including the T15 and T35.

Rincian

Terbit di NVD

30 Maret 2026

Terakhir diubah

28 Agustus 2026

Status NVD

Analyzed

CVSS 3.1

6.7 (Medium), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-502: Deserialization of Untrusted Data

EPSS (30 hari)

0,39% peluang dieksploitasi; lebih tinggi dari 31,2% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://www.watchguard.com/wgrd-psirt/advisory/wgsa-2026-00007 advisory vendor
• https://psirt.watchguard.com/CVE-2026-4266 broken link