VYPR

FireCluster

by Fireware OS

CVEs (2)

  • CVE-2026-93865CriOct 27, 2026
    risk 0.60cvss —epss —

    A missing authentication vulnerability in the Fireware OS FireCluster synchronization daemon allows a remote, unauthenticated attacker to invoke privileged system-level administrative actions by sending a specially crafted request to the FireCluster management IP when the…

  • CVE-2026-104381MedOct 27, 2026
    risk 0.39cvss —epss —

    A missing authentication vulnerability in Fireware OS's FireCluster state synchronization feature allows an unauthenticated attacker positioned on the cluster synchronization network segment to force premature VPN tunnel termination by sending crafted cluster synchronization…