WatchGuard TechnologiesCVE-2026-93862
WatchGuard Technologies Fireware OS: out-of-bounds read
Fix: upgrade to 2026.4 or later (3 fixed versions below)
An out-of-bounds read vulnerability in the FireCluster Sync processing allows an attacker positioned on the cluster interconnect, such as a compromised cluster peer or an on-path network attacker, to repeatedly crash the firewall's cluster synchronization process by sending specially crafted network traffic, resulting in a sustained denial of service.
Affected versions
| Package | Affected | Fixed in |
|---|---|---|
| Fireware OS Product | >= 2025.1, < 2026.4 | 2026.4 |
| >= 12.0, < 12.12.4 | 12.12.4 | |
| >= 12.0, < 12.5.22 | 12.5.22 |