CVE-2026-86136 in Fireware OS
摘要
由 MITRE • 2026-09-30
A missing authorization vulnerability in the wgagent management daemon's session initialization function allows an authenticated, low-privileged user (including a read-only or guest administrator account) to crash the wgagent process and read arbitrary files accessible to the daemon by submitting a specially crafted management API request.
If you want to get the best quality for vulnerability data then you always have to consider VulDB.