PT-2026-102952 · Unknown · Fireware Os

·

CVE-2026-86105

·

Published

2026-09-29

·

Updated

2026-09-30

CVSS v3.1

7.1

High

VectorAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N
Name of the Vulnerable Software and Affected Versions Fireware OS (affected versions not specified)
Description An improper authorization issue exists in the Access Portal reverse proxy. This allows an authenticated user with low privileges to access unauthorized web applications by sending a specially crafted request for a resource they are permitted to access.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Path traversal

Improper Authorization

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

CVE-2026-86105

Affected Products

Fireware Os