CVE-2026-90441 — Fireware OS Missing Authorization in wgagent Management API Allows Denial of Service - Variant B
A missing authorization vulnerability in the wgagent management daemon's session initialization function allows an authenticated, low-privileged user (including a read-only or g…
Published: 2026-09-29 · CVSS: 7.1 · CVSS 4.0
A missing authorization vulnerability in the wgagent management daemon's session initialization function allows an authenticated, low-privileged user (including a read-only or guest administrator account) to crash the wgagent process and read arbitrary files accessible to the daemon by submitting a specially crafted management API request.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7