Live › vulnerability › CVE-2026-93434
Go to dashboardWatchGuard Fireware OS has an XPath injection flaw in its SSH authentication process. A remote attacker who can reach the management SSH interface can send a crafted request to extract sensitive configuration data.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-27 16:33 UTC. All times on this page are UTC.
Appliances running WatchGuard Fireware OS with the management SSH interface reachable by an attacker. Sites that keep management SSH closed to untrusted networks have less exposure. The sources do not list affected versions.
No product ranges from the sources yet.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
An XPath injection vulnerability in WatchGuard Fireware OS's SSH authentication process allows a remote, unauthenticated attacker with access to the management SSH interface to extract sensitive configuration data by submitting a specially crafted request.
This page as .md · .json · in your agent: get_signal("CVE-2026-93434")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.