Threats tagged 'ghsa-rwrf-f344-f6wx'

CVE-2026-90465 is a critical vulnerability in the FireCluster Sync processing component where missing authentication allows an attacker on the cluster interconnect to execute privileged firewall management actions as root. This can be exploited by a compromised cluster peer or an on-path network attacker sending specially crafted requests.