CVE-2026-86132

A pre-authentication integer underflow vulnerability exists in the WatchGuard Fireware OS IKEv2 daemon (iked ). This flaw allows a remote, unauthenticated attacker to cause a Denial of Service (DoS) by crashing the process. The attack is triggered by sending a specially crafted encrypted IKEv2 me...

CVE-2026-86132 Fireware OS Pre-Authentication Integer Underflow in iked Allows Denial of Service

An integer underflow vulnerability in the WatchGuard Fireware OS IKEv2 daemon iked allows a remote, unauthenticated attacker to crash the process by sending a specially crafted encrypted IKEv2 message negotiated with an AES-GCM cipher suite...

CVE-2026-86101 Fireware OS Authorization Bypass in SAML Login Allows Unauthorized SSLVPN Access

An improper authorization vulnerability in WatchGuard Fireware OS's SAML login process allows a remote, authenticated SAML user with access only to the Access Portal to obtain unauthorized Mobile VPN with SSL access through a specially crafted request...

CVE-2026-86131 Fireware OS Code Injection in BOVPN Over TLS Client Allows Remote Code Execution

A code injection vulnerability in WatchGuard Fireware OS's BOVPN Over TLS client configuration handling allows an attacker who controls the remote VPN server to execute arbitrary commands as root on the connecting Firebox...

CVE-2026-86131 Fireware OS Code Injection in BOVPN Over TLS Client Allows Remote Code Execution

A code injection vulnerability in WatchGuard Fireware OS's BOVPN Over TLS client configuration handling allows an attacker who controls the remote VPN server to execute arbitrary commands as root on the connecting Firebox...

CVE-2026-81433

WatchGuard Fireware OS is affected by a stack-based buffer overflow vulnerability in its DHCP fingerprinting daemon (fingerd ). An unauthenticated attacker with adjacent network access can exploit this by sending a specially crafted DHCP packet to execute arbitrary code or cause a process crash. ...

CVE-2026-86131

A code injection vulnerability exists in the WatchGuard Fireware OS during the handling of BOVPN Over TLS client configurations. This flaw allows an attacker who controls a remote VPN server to execute arbitrary commands with root privileges on the connecting Firebox . No specific patch versions ...

CVE-2026-18145

The WatchGuard Fireware OS contains a stack-based buffer overflow vulnerability within the spamBlocker (spamd) service. An authenticated attacker possessing administrator privileges can exploit this flaw by sending a specially crafted management request. Successful exploitation could result in a ...

CVE-2026-86133 Fireware OS Pre-Authentication Integer Underflow in iked Allows Remote Denial of Service

An integer underflow vulnerability in the WatchGuard Fireware OS IKE daemon iked allows a remote attacker who has completed the initial IKEv2 handshake to crash the iked process by sending a specially crafted encrypted IKEv2 message, resulting in a denial of service...

CVE-2026-81433 Fireware OS Pre-Authentication Stack Buffer Overflow in fingerd Allows Remote Code Execution

A stack-based buffer overflow vulnerability in WatchGuard Fireware OS's DHCP fingerprinting daemon fingerd allows an unauthenticated attacker with adjacent network access to execute arbitrary code or crash the process by sending a specially crafted DHCP packet...

PT-2026-102948

Name of the Vulnerable Software and Affected Versions WatchGuard Fireware OS affected versions not specified Description A stack-based buffer overflow in the spamBlocker spamd service allows an authenticated attacker with administrator privileges to crash the service or potentially execute...

PT-2026-102950

Name of the Vulnerable Software and Affected Versions WatchGuard Fireware OS affected versions not specified Description An improper authorization issue exists in the SAML login process. This allows a remote, authenticated SAML user who only has access to the Access Portal to gain unauthorized...

PT-2026-102955

Name of the Vulnerable Software and Affected Versions WatchGuard Fireware OS affected versions not specified Description An integer underflow in the IKEv2 daemon iked allows a remote, unauthenticated attacker to crash the process. This is achieved by sending a specially crafted encrypted IKEv2...

PT-2026-102954

Name of the Vulnerable Software and Affected Versions WatchGuard Fireware OS affected versions not specified Description A code injection issue exists in the BOVPN Over TLS client configuration handling. An attacker who controls the remote VPN server can execute arbitrary commands with root...

PT-2026-102949

Name of the Vulnerable Software and Affected Versions WatchGuard Fireware OS affected versions not specified Description A stack-based buffer overflow occurs in the DHCP fingerprinting daemon fingerd. An unauthenticated attacker with adjacent network access can execute arbitrary code or cause the...

PT-2026-102945

Name of the Vulnerable Software and Affected Versions WatchGuard Fireware OS affected versions not specified Description An issue exists in the SAML single sign-on session handling samld where untrusted data is deserialized. An attacker who has already obtained the ability to write files on the...

PT-2026-102956

Name of the Vulnerable Software and Affected Versions WatchGuard Fireware OS affected versions not specified Description An integer underflow in the IKE daemon iked allows a remote attacker to cause a denial of service. After completing the initial IKEv2 handshake, the attacker can crash the iked...

WatchGuard FireWare OS epm connect Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of WatchGuard FireWare OS. Authentication is not required to exploit this vulnerability. The specific flaw exists within the Endpoint Protection Manager service. The issue results from the lac...

Vulnerabilities in WatchGuard Fireware OS

WatchGuard has identified vulnerabilities in the WatchGuard Fireware OS, specifically in the iked process and the epm-service of the Mobile Security component. These vulnerabilities reside in the iked process and the epm-service of WatchGuard Fireware OS. The iked process contains a stack-based...

EUVD-2026-67331

An out-of-bounds read vulnerability in the WatchGuard Fireware OS iked process allows a remote unauthenticated attacker to create a Denial of Service DoS condition in VPN processing by sending specially crafted network traffic...