WatchGuard released Fireware OS security updates on Oct. 28, but CERT counts differ: CSIRT Italia lists 14 vulnerabilities—seven critical and seven high—while Spain’s INCIBE-CERT lists seven—six critical and one high. Their listed affected configurations also differ.
One of INCIBE-CERT’s listed flaws, CVE-2026-93865, affects FireCluster: its synchronization service accepts requests to the cluster management IP without checking who sent them, allowing remote callers to invoke privileged administrative actions. That could affect cluster operations, but it is not a blanket flaw on every Firebox. Other reported paths depend on conditions such as a configured FireCloud Gateway or manipulated Active Directory replies.
For Firebox operators, exposure depends on the model and configuration, not just the Fireware version. The reports provide no evidence of exploitation in the wild.
WatchGuard ha rilasciato aggiornamenti di sicurezza per sanare molteplici vulnerabilità, di cui 7 con gravità “critica” e 7 con gravità “alta”, in Fireware OS, sistema operativo utilizzato nei dispositivi di sicurezza perimetrale e di protezione delle reti.