Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-mmhr-mfjp-vv8j

Опубликовано: 30 мар. 2026
Источник: github
Github: Не прошло ревью
CVSS4: 8.4

Описание

An Insecure Deserialization vulnerability in WatchGuard Fireware OS allows an attacker that has obtained write access to the local filesystem through another vulnerability to execute arbitrary code in the context of the portald user.This issue affects Fireware OS: 12.1 through 12.11.8 and 2025.1 through 2026.1.2.

Note, this vulnerability does not affect Firebox platforms that do not support the Access Portal feature, including the T-15 and T-35.

An Insecure Deserialization vulnerability in WatchGuard Fireware OS allows an attacker that has obtained write access to the local filesystem through another vulnerability to execute arbitrary code in the context of the portald user.This issue affects Fireware OS: 12.1 through 12.11.8 and 2025.1 through 2026.1.2.

Note, this vulnerability does not affect Firebox platforms that do not support the Access Portal feature, including the T-15 and T-35.

EPSS

Процентиль: 19%
0.00061
Низкий

8.4 High

CVSS4

Дефекты

CWE-502

Связанные уязвимости

nvd
11 дней назад

An Insecure Deserialization vulnerability in WatchGuard Fireware OS allows an attacker that has obtained write access to the local filesystem through another vulnerability to execute arbitrary code in the context of the portald user.This issue affects Fireware OS: 12.1 through 12.11.8 and 2025.1 through 2026.1.2. Note, this vulnerability does not affect Firebox platforms that do not support the Access Portal feature, including the T-15 and T-35.

EPSS

Процентиль: 19%
0.00061
Низкий

8.4 High

CVSS4

Дефекты

CWE-502