CVE-2026-93434

{
  "etk_id": "ETK-2026-2778",
  "cve_id": "CVE-2026-93434",
  "display_id": "CVE-2026-93434",
  "ghsa_id": "GHSA-3fmv-cm8f-v9fm",
  "euvd_id": "EUVD-2026-111152",
  "status": "published",
  "anchor_state": "anchored",
  "title": "XPath injection in WatchGuard Fireware OS SSH authentication",
  "summary": "WatchGuard Fireware OS contains an XPath injection flaw in its SSH authentication handling. An unauthenticated remote attacker who can connect to the management SSH interface may obtain sensitive configuration data.",
  "mitigation": "Upgrade Fireware OS to 12.5.22, 2026.4, or 12.12.4, as appropriate for the deployed release train. Restrict access to the management SSH interface to trusted administrative networks until the upgrade is complete.",
  "vendor": "WatchGuard",
  "product": "Fireware OS",
  "affected": [
    {
      "affected_notes": [],
      "affected_ranges": [
        ">= 12.0, < 12.5.22"
      ],
      "ecosystem": null,
      "fixed_versions": [
        "12.5.22"
      ],
      "package_name": "Fireware OS",
      "purl": null
    },
    {
      "affected_notes": [],
      "affected_ranges": [
        ">= 2025.1, < 2026.4",
        ">= 12.0, < 12.12.4"
      ],
      "ecosystem": null,
      "fixed_versions": [
        "2026.4",
        "12.12.4"
      ],
      "package_name": "Fireware OS",
      "purl": null
    }
  ],
  "cwes": [
    20
  ],
  "cvss_score": 8.7,
  "cvss_src": "cna_vendor",
  "cvss_vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N",
  "epss_score": null,
  "epss_percentile": null,
  "epss_asof": null,
  "automation": "contextual",
  "check": false,
  "check_confidence_basis": null,
  "exploit": false,
  "pipeline_minutes": 39.38415106666667,
  "t0_at": "2026-10-27T15:52:28.182000+00:00",
  "signals": {
    "trigger_signal": {
      "at": "2026-10-27T15:52:28.182000+00:00",
      "days": 0,
      "is_lower_bound": false,
      "measured_at": "2026-10-27T15:52:28.182000+00:00",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-93434"
    }
  }
}