CVE-2026-78009: Out-of-bounds Read

An out-of-bounds read vulnerability in the WatchGuard Fireware OS iked process allows a remote unauthenticated attacker to create a Denial of Service DoS condition in VPN processing by sending specially crafted network traffic...

CVE-2026-19315: Out-of-bounds Read

A type confusion vulnerability in the iked process of WatchGuard Fireware OS allows a remote unauthenticated attacker to execute arbitrary code by sending specially crafted network traffic...

CVE-2026-19317: Out-of-bounds Read

An out-of-bounds read vulnerability in the WatchGuard Fireware OS iked process allows a remote unauthenticated attacker to create a Denial of Service DoS condition in VPN processing by sending specially crafted network traffic...

CVE-2026-19314 Fireware OS Integer Underflow in iked Allows Unauthenticated Denial of Service (DoS)

An integer underflow vulnerability in the WatchGuard Fireware OS iked process allows a remote unauthenticated attacker to create a Denial of Service DoS condition in VPN processing by sending specially crafted network traffic...

CVE-2026-19317

CVE-2026-19317 is an out-of-bounds read vulnerability in the iked process of WatchGuard Fireware OS , used for IPsec key exchange in VPN processing. A remote, unauthenticated attacker can trigger a Denial of Service condition by sending specially crafted network traffic, resulting in high impact ...

CVE-2026-19315

A type confusion vulnerability in the iked process of WatchGuard Fireware OS allows a remote, unauthenticated attacker to achieve arbitrary code execution by sending specially crafted network traffic. The vulnerability is rated CVSS 4.0 9.3 (CRITICAL) , reflecting a network attack vector with low...

CVE-2026-19317 Fireware OS Pre-Authentication Out-of-Bounds Read in iked Allows Denial of Service (DoS)

An out-of-bounds read vulnerability in the WatchGuard Fireware OS iked process allows a remote unauthenticated attacker to create a Denial of Service DoS condition in VPN processing by sending specially crafted network traffic...

CVE-2026-19314 Fireware OS Integer Underflow in iked Allows Unauthenticated Denial of Service (DoS)

An integer underflow vulnerability in the WatchGuard Fireware OS iked process allows a remote unauthenticated attacker to create a Denial of Service DoS condition in VPN processing by sending specially crafted network traffic...

CVE-2026-78011 Fireware OS Integer Underflow in Iked Allows Unauthenticated Denial of Service (DoS)

An integer underflow vulnerability in the WatchGuard Fireware OS iked process allows a remote unauthenticated attacker to create a Denial of Service DoS condition in VPN processing by sending specially crafted network traffic...

CVE-2026-19314

CVE-2026-19314 is an integer underflow vulnerability in the iked process of WatchGuard Fireware OS . A remote unauthenticated attacker can trigger a Denial of Service condition in VPN processing by sending specially crafted network traffic , resulting in a high availability impact (CVSS 4.0: 8.7 ...

CVE-2026-19317 Fireware OS Pre-Authentication Out-of-Bounds Read in iked Allows Denial of Service (DoS)

An out-of-bounds read vulnerability in the WatchGuard Fireware OS iked process allows a remote unauthenticated attacker to create a Denial of Service DoS condition in VPN processing by sending specially crafted network traffic...

CVE-2026-19315 Fireware OS Pre-Authentication Type Confusion in iked Allows Remote Code Execution

A type confusion vulnerability in the iked process of WatchGuard Fireware OS allows a remote unauthenticated attacker to execute arbitrary code by sending specially crafted network traffic...

CVE-2026-19315 Fireware OS Pre-Authentication Type Confusion in iked Allows Remote Code Execution

A type confusion vulnerability in the iked process of WatchGuard Fireware OS allows a remote unauthenticated attacker to execute arbitrary code by sending specially crafted network traffic...

CVE-2026-78011

CVE-2026-78011 is an integer underflow vulnerability in the iked process of WatchGuard Fireware OS . A remote unauthenticated attacker can trigger a Denial of Service (DoS) in VPN processing by sending specially crafted network traffic . The CVSS 4.0 score is 8.7 (HIGH) , with a network attack ve...

CVE-2026-78011 Fireware OS Integer Underflow in Iked Allows Unauthenticated Denial of Service (DoS)

An integer underflow vulnerability in the WatchGuard Fireware OS iked process allows a remote unauthenticated attacker to create a Denial of Service DoS condition in VPN processing by sending specially crafted network traffic...

CVE-2026-13086 Fireware OS Stack-Based Buffer Overflow in Mobile Security epm Endpoint

A stack-based buffer overflow in the epm Endpoint Protection Manager service used by the deprecated Mobile Security feature in WatchGuard Fireware OS allows an unauthenticated remote attacker to execute arbitrary code...

CVE-2026-78009 Fireware OS Out-of-Bounds Read in iked Allows Unauthenticated Denial of Service (DoS)

An out-of-bounds read vulnerability in the WatchGuard Fireware OS iked process allows a remote unauthenticated attacker to create a Denial of Service DoS condition in VPN processing by sending specially crafted network traffic...

CVE-2026-13086

CVE-2026-13086 affects the epm (Endpoint Protection Manager) service used by the deprecated Mobile Security feature in WatchGuard Fireware OS . The vulnerability is a stack-based buffer overflow that allows an unauthenticated remote attacker to execute arbitrary code, rated CVSS 4.0 9.3 (CRITICAL...

CVE-2026-19316

CVE-2026-19316 is a double-free vulnerability in the iked process of WatchGuard Fireware OS , which handles VPN (IKE) processing. A remote unauthenticated attacker can trigger a Denial of Service condition by sending specially crafted network traffic, crashing the iked process. The CVSS 4.0 base ...

CVE-2026-78010 Fireware OS Stack-Based Buffer Overflow in iked Allows Unauthenticated Denial of Service

A stack-based buffer overflow vulnerability in the WatchGuard Fireware OS iked process iallows a remote unauthenticated attacker to create a Denial of Service DoS condition in VPN processing by sending specially crafted network traffic...