Vulnerabilities CVE-2026-4266

CVE-2026-4266

High

Open

TLP:CLEAR

WatchGuard Firebox Insecure Deserialization in Fireware Access Portal

NVD CVE.org

AI Analysis

No AI analysis yet.

Description

An Insecure Deserialization vulnerability in WatchGuard Fireware OS allows an attacker that has obtained write access to the local filesystem through another vulnerability to execute arbitrary code in the context of the portald user. Note, this vulnerability does not affect Firebox platforms that do not support the Access Portal feature, including the T15 and T35.

Details

CVSS Score: 8.4
EPSS Score ⓘ: 0.28%

20.7th percentile
CVSS Vector: CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Confidence: 90%
Published: Mar 30, 2026
Last Modified: Aug 10, 2026

Notes

No notes yet. Click "Add Note" to create the first analysis note.

Opinions

No opinions yet. Be the first to assess this intelligence.