CVE-2026-90441
Last modified
CVE-2026-90441 is a high-severity vulnerability rated 8.1/10 on the CVSS scale. A missing authorization vulnerability in the wgagent management daemon's session initialization function allows an authenticated, low-privileged user (including a read-only or guest administrator account) to crash the wgagent process and read arbitrary files accessible to the daemon by submitting a specially crafted management API request.. EPSS estimates a 0.21% chance of exploitation in the next 30 days.
Description
A missing authorization vulnerability in the wgagent management daemon's session initialization function allows an authenticated, low-privileged user (including a read-only or guest administrator account) to crash the wgagent process and read arbitrary files accessible to the daemon by submitting a specially crafted management API request.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Watchguard | Fireware | >= 12.0, < 12.5.21 |
| Watchguard | Fireware | >= 12.12, < 12.12.3 |
| Watchguard | Fireware | >= 2025.0, < 2026.2.3 |
| Watchguard | Fireware | >= 2026.3, < 2026.3.2 |
References
- https://psirt.watchguard.com/CVE-2026-90441Patch, Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Analyzed
Frequently Asked Questions
What is CVE-2026-90441?
How severe is CVE-2026-90441?
How do I fix CVE-2026-90441?
How Strix Helps
- Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-90434In the Linux kernel, the following vulnerability has been re…
- CVE-2026-90435In the Linux kernel, the following vulnerability has been re…7.8
- CVE-2026-90438The Ninja Forms – The Contact Form Builder That Grows With Y…7.2
- CVE-2026-90439NGINX Plus and NGINX Open Source have a vulnerability in the…6.5
- CVE-2026-9044An OS command injection vulnerability exists in the VPN modu…8
- CVE-2026-90440Uncaught exception, improper handling of exceptional conditi…8.2
- CVE-2026-90442A stack-based buffer overflow vulnerability in the Fireware …8.6
- CVE-2026-90443A web interface reflects a portion of the request URL into a…5.4
- CVE-2026-90444A file-transfer interface that requires valid credentials ac…8.8
- CVE-2026-90445An interface that accepts file uploads from authenticated us…6.5
- CVE-2026-90446An application programming interface endpoint accepts a user…4.3
- CVE-2026-90447A routing rule selects between two different authentication …6.5
Are you affected by CVE-2026-90441?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST