CVE-2026-104381

MEDIUM 6.0CVE-2026-104381 · Published 27/10/2026 · updated 04/11/2026

In short

CVE-2026-104381 is a MEDIUM (CVSS 6.0) vulnerability.
Chance of exploitation in the next 30 days (EPSS): 0.13%, higher than 2.9% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
—	No affected product versions are listed for this vulnerability yet.

Description

A missing authentication vulnerability in Fireware OS's FireCluster state synchronization feature allows an unauthenticated attacker positioned on the cluster synchronization network segment to force premature VPN tunnel termination by sending crafted cluster synchronization traffic.

References

psirt.watchguard.com/CVE-2026-104381

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free