XPath Injection Vulnerability in WatchGuard Fireware OS SSH Authentication
CVE-2026-93434

8.7HIGH

Key Information:

Vendor

Watchguard

Status
Fireware Os
Vendor
CVE Published:
27 October 2026

Badges

👾 Exploit Exists

What is CVE-2026-93434?

An XPath injection vulnerability exists in the SSH authentication process of WatchGuard Fireware OS, allowing remote, unauthenticated attackers to manipulate requests. This vulnerability enables them to access sensitive configuration data by exploiting the management SSH interface with specially crafted submissions.

Affected Version(s)

Fireware OS 12.0 < 12.5.22

Fireware OS Default 2025.1 < 2026.4

Fireware OS Default 12.0 < 12.12.4

References

https://psirt.watchguard.com/CVE-2026-93434
vendor-advisory

CVSS V4

Score:
8.7
Severity:
HIGH
Confidentiality:
High
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • 👾

    Exploit known to exist

  • Vulnerability published

  • Vulnerability Reserved

Credit

Markus Piéton, Fabian Weber, Florian Roth (all CODE WHITE GmbH)
.