CVE-2026-4266 - An Insecure Deserialization vulnerability in WatchGuard Fireware OS allows an attacker that has obtained write access to the local filesystem through another vulnerability to execute arbitrary code in the context of the portald user. Note, this vulnerability does not affect Firebox platforms that do not support the Access Portal feature, including the T15 and T35. - 漏洞详情

漏洞编号：CVE-2026-4266

风险等级：中危

漏洞来源：CVE

CVE 编号：CVE-2026-4266

CNNVD 编号：-

厂商/产品：watchguard / fireware

影响范围：cpe:2.3:o:watchguard:fireware:*:*:*:*:*:*:*:*

CWE：CWE-502

发布/更新时间：2026-03-30 / 2026-08-28

漏洞描述

An Insecure Deserialization vulnerability in WatchGuard Fireware OS allows an attacker that has obtained write access to the local filesystem through another vulnerability to execute arbitrary code in the context of the portald user.

Note, this vulnerability does not affect Firebox platforms that do not support the Access Portal feature, including the T15 and T35.

漏洞描述

相关链接

相关漏洞