CVE-2026-104381
Last modified
CVE-2026-104381 is a medium-severity vulnerability rated 6/10 on the CVSS scale. A missing authentication vulnerability in Fireware OS's FireCluster state synchronization feature allows an unauthenticated attacker positioned on the cluster synchronization network segment to force premature VPN tunnel termination by sending crafted cluster synchronization traffic.. EPSS estimates a 0.13% chance of exploitation in the next 30 days.
Description
A missing authentication vulnerability in Fireware OS's FireCluster state synchronization feature allows an unauthenticated attacker positioned on the cluster synchronization network segment to force premature VPN tunnel termination by sending crafted cluster synchronization traffic.
Metrics
Weakness Enumeration
Affected Software
Source: CNA advisory (CVE.org). NVD analysis pending.
| Vendor | Product | Versions |
|---|---|---|
| WatchGuard | Fireware OS | >= 2025.1, < 2026.4; >= 12.0, < 12.12.4 |
| WatchGuard | Fireware OS | >= 12.0, < 12.5.22 |
References
Timeline
- Published
- Last Modified
- Status
- Awaiting Analysis
Frequently Asked Questions
What is CVE-2026-104381?
How severe is CVE-2026-104381?
How do I fix CVE-2026-104381?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Same Subject, Wrong User: A Cross-Issuer Account Takeover in n8nStrix found an identity-binding bug in n8n's token-exchange flow enabling account takeover.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-104353Adobe Campaign Classic (ACC) is affected by an Improper Neut…9.9
- CVE-2026-104354Adobe Campaign Classic (ACC) is affected by an Improper Neut…9.1
- CVE-2026-104355A connected peer cluster can modify a Temporal Server cluste…7
- CVE-2026-104356PictShare before version 3.7.1 contains a weak randomness vu…5.9
- CVE-2026-104364IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 cou…3.3
- CVE-2026-104380Punk versions from 0.48 before 0.55 for Perl route Extended …5.3
- CVE-2026-104383Improper Control of Generation of Code in Pigeon MFA service…9.4
- CVE-2026-104384Insufficiently Protected Credentials in tunnel gateway and p…8.7
- CVE-2026-104385Unauthenticated Sensitive Data Exposure in Groundhogg <= 4.8…7.5
- CVE-2026-104386Missing Authorization vulnerability in WPFunnels Team WP VR …6.5
- CVE-2026-104387Unauthenticated Broken Access Control in PowerPress Podcasti…7.2
- CVE-2026-104388Missing Authorization vulnerability in Blubrry Podcasting Po…5.3
Are you affected by CVE-2026-104381?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST