What is GHSA-3qq2-3hjm-m64g?

GHSA-3qq2-3hjm-m64g is a security advisory published by GitHub Security Advisories with Medium severity. A missing authentication vulnerability in Fireware OS's FireCluster state synchronization feature...

Which CVE IDs does GHSA-3qq2-3hjm-m64g cover?

GHSA-3qq2-3hjm-m64g covers the following CVE IDs: CVE-2026-104381. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

GHSA-3qq2-3hjm-m64gMedium

A missing authentication vulnerability in Fireware OS's FireCluster state synchronization feature...

Vendor

GitHub Security Advisories

Published

October 27, 2026

Last Modified

October 27, 2026

🔗 CVE IDs covered (1)

CVE-2026-104381 →

📋 Description

A missing authentication vulnerability in Fireware OS's FireCluster state synchronization feature allows an unauthenticated attacker positioned on the cluster synchronization network segment to force premature VPN tunnel termination by sending crafted cluster synchronization traffic.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-104381
https://psirt.watchguard.com/CVE-2026-104381
https://github.com/advisories/GHSA-3qq2-3hjm-m64g