PT-2026-102955

Name of the Vulnerable Software and Affected Versions WatchGuard Fireware OS affected versions not specified Description An integer underflow in the IKEv2 daemon iked allows a remote, unauthenticated attacker to crash the process. This is achieved by sending a specially crafted encrypted IKEv2...

PT-2026-102954

Name of the Vulnerable Software and Affected Versions WatchGuard Fireware OS affected versions not specified Description A code injection issue exists in the BOVPN Over TLS client configuration handling. An attacker who controls the remote VPN server can execute arbitrary commands with root...

PT-2026-102950

Name of the Vulnerable Software and Affected Versions WatchGuard Fireware OS affected versions not specified Description An improper authorization issue exists in the SAML login process. This allows a remote, authenticated SAML user who only has access to the Access Portal to gain unauthorized...

PT-2026-102948

Name of the Vulnerable Software and Affected Versions WatchGuard Fireware OS affected versions not specified Description A stack-based buffer overflow in the spamBlocker spamd service allows an authenticated attacker with administrator privileges to crash the service or potentially execute...

PT-2026-102952

Name of the Vulnerable Software and Affected Versions Fireware OS affected versions not specified Description An improper authorization issue exists in the Access Portal reverse proxy. This allows an authenticated user with low privileges to access unauthorized web applications by sending a...

WatchGuard FireWare OS epm connect Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of WatchGuard FireWare OS. Authentication is not required to exploit this vulnerability. The specific flaw exists within the Endpoint Protection Manager service. The issue results from the lac...

Vulnerabilities in WatchGuard Fireware OS

WatchGuard has identified vulnerabilities in the WatchGuard Fireware OS, specifically in the iked process and the epm-service of the Mobile Security component. These vulnerabilities reside in the iked process and the epm-service of WatchGuard Fireware OS. The iked process contains a stack-based...

EUVD-2026-67336

An integer underflow vulnerability in the WatchGuard Fireware OS iked process allows a remote unauthenticated attacker to create a Denial of Service DoS condition in VPN processing by sending specially crafted network traffic...

EUVD-2026-67331

An out-of-bounds read vulnerability in the WatchGuard Fireware OS iked process allows a remote unauthenticated attacker to create a Denial of Service DoS condition in VPN processing by sending specially crafted network traffic...

EUVD-2026-67335

A stack-based buffer overflow vulnerability in the WatchGuard Fireware OS iked process iallows a remote unauthenticated attacker to create a Denial of Service DoS condition in VPN processing by sending specially crafted network traffic...

EUVD-2026-67329

A buffer overflow vulnerability in the WatchGuard Fireware OS Management Web UI allows an authenticated administrator with network access to cause a denial of service DoS condition or potentially execute arbitrary code by sending specially crafted network traffic...

EUVD-2026-67337

An out-of-bounds read vulnerability in the WatchGuard Fireware OS iked process allows a remote unauthenticated attacker to create a Denial of Service DoS condition in VPN processing by sending specially crafted network traffic...

EUVD-2026-67330

A stack-based buffer overflow vulnerability in the WatchGuard Fireware OS iked process allows a remote unauthenticated attacker to execute arbitrary code by sending specially crafted network traffic...

EUVD-2026-67332

A double-free vulnerability in the WatchGuard Fireware OS iked process allows a remote unauthenticated attacker to create a Denial of Service DoS condition in VPN processing by sending specially crafted network traffic...

EUVD-2026-67339

A type confusion vulnerability in the iked process of WatchGuard Fireware OS allows a remote unauthenticated attacker to execute arbitrary code by sending specially crafted network traffic...

EUVD-2026-67334

A stack-based buffer overflow in the epm Endpoint Protection Manager service used by the deprecated Mobile Security feature in WatchGuard Fireware OS allows an unauthenticated remote attacker to execute arbitrary code...

EUVD-2026-67333

An heap overflow vulnerability in the WatchGuard Fireware OS iked process allows a remote unauthenticated attacker to execute arbitrary code by sending specially crafted network traffic...

EUVD-2026-67338

An integer underflow vulnerability in the WatchGuard Fireware OS iked process allows a remote unauthenticated attacker to create a Denial of Service DoS condition in VPN processing by sending specially crafted network traffic...

CVE-2026-78008

A buffer overflow vulnerability in the WatchGuard Fireware OS Management Web UI allows an authenticated administrator with network access to cause a denial of service DoS condition or potentially execute arbitrary code by sending specially crafted network traffic...

CVE-2026-78011

An integer underflow vulnerability in the WatchGuard Fireware OS iked process allows a remote unauthenticated attacker to create a Denial of Service DoS condition in VPN processing by sending specially crafted network traffic...