CVE-2026-90465

A missing authentication vulnerability in the FireCluster Sync processing of Fireware OS allows an attacker to achieve privilege escalation . By sending a specially crafted request, an attacker positioned on the cluster interconnect—such as a compromised cluster peer or an on-path network attacke...

CVE-2026-90465 Fireware OS Missing Authentication in FireCluster Sync Allows Privilege Escalation

A missing authentication vulnerability in the FireCluster Sync processing allows an attacker positioned on the cluster interconnect, such as a compromised cluster peer or an on-path network attacker, to invoke privileged firewall management actions as root by sending a specially crafted request...

CVE-2026-113881 Fireware OS Stack Buffer Overflow in VPN Network Access Enforcement Allows Unprivileged Code Execution

A stack-based buffer overflow vulnerability in Fireware OS's VPN Network Access Enforcement process allows an authenticated mobile VPN user to create a denial of service condition and potentially execute arbitrary code as an unprivileged process by sending a specially crafted request...

CVE-2026-103593 Fireware OS Stack Buffer Overflow in Logging Service Allows Remote Code Execution

A stack-based buffer overflow vulnerability in the Fireware OS logging service allows a network-adjacent attacker who can impersonate or intercept traffic to the configured log server to execute arbitrary code with root privileges by presenting a specially crafted certificate...

CVE-2026-112709

A heap-based buffer overflow vulnerability exists in the Fireware OS authentication service . An attacker who controls or intercepts traffic to the configured Active Directory server can trigger a denial of service condition or potentially achieve remote code execution by providing a specially cr...

CVE-2026-112709 Fireware OS Heap Buffer Overflow in AD Authentication Service Allows Pre-Authentication Remote Code Execution

A heap-based buffer overflow vulnerability in the Fireware OS authentication service allows an attacker who controls or intercepts traffic to the configured Active Directory server to create a denial of service condition and potentially execute arbitrary code by returning a specially crafted...

CVE-2026-112710 Fireware OS Heap Buffer Overflow in AD Authentication Service Allows Pre-Authentication Remote Code Execution

A heap-based buffer overflow vulnerability exists in the Fireware OS authentication service allows an attacker who controls or intercepts traffic to the configured Active Directory server to create a denial of service condition and potentially execute arbitrary code by returning a specially craft...

CVE-2026-103593

A stack-based buffer overflow exists in the Fireware OS logging service . This vulnerability allows a network-adjacent attacker to execute arbitrary code with root privileges by intercepting or impersonating traffic to the configured log server and presenting a specially crafted certificate. The ...

CVE-2026-90442

A stack-based buffer overflow vulnerability exists in the Fireware OS certd process . An authenticated attacker with access to the Firebox management interface can exploit this by sending a specially crafted request. The vulnerability may cause the certificate management service to crash (Denial ...

CVE-2026-93862

An out-of-bounds read vulnerability exists in the FireCluster Sync processing of Fireware OS . An attacker positioned on the cluster interconnect, such as a compromised cluster peer or an on-path network attacker, can send specially crafted network traffic to repeatedly crash the firewall's clust...

CVE-2026-90464

The WatchGuard Fireware OS firewall contains an external control of file path vulnerability within a diagnostic command. A remote, authenticated attacker possessing at least read-only (Device Monitor) privileges and management CLI access can submit a specially crafted command to create, truncate,...

CVE-2026-112710

A heap-based buffer overflow exists in the Fireware OS authentication service. An attacker who controls or intercepts traffic to the configured Active Directory server can send a specially crafted response to trigger the vulnerability. This could lead to a denial of service condition or potential...

CVE-2026-113881

A stack-based buffer overflow vulnerability exists in the Fireware OS VPN Network Access Enforcement process. This flaw allows an authenticated mobile VPN user to cause a denial of service condition or potentially achieve unprivileged code execution by sending a specially crafted request. No spec...

CVE-2026-90442 Fireware OS Authenticated Stack Buffer Overflow in certd Allows Denial of Service

A stack-based buffer overflow vulnerability in the Fireware OS certd process allows an authenticated attacker with access to the Firebox management interface to crash the certificate management service and potentially execute arbitrary code by sending a specially crafted request...

CVE-2026-93434

An XPath injection vulnerability exists in the SSH authentication process of WatchGuard Fireware OS . This flaw allows a remote, unauthenticated attacker with access to the management SSH interface to submit a specially crafted request to perform a blind extraction of sensitive configuration data...

CVE-2026-93862 Fireware OS Out-of-Bounds Read in FireCluster Sync Allows Denial of Service

An out-of-bounds read vulnerability in the FireCluster Sync processing allows an attacker positioned on the cluster interconnect, such as a compromised cluster peer or an on-path network attacker, to repeatedly crash the firewall's cluster synchronization process by sending specially crafted...

CVE-2026-90464 Fireware OS Missing Command Validation allows Authenticated Arbitrary File Modification as Root

An external control of file path vulnerability in a WatchGuard Fireware OS firewall diagnostic command allows a remote, authenticated attacker with at least read-only Device Monitor privileges and access to the management CLI to create, truncate, or overwrite arbitrary files and modify kernel...

EUVD-2026-111149

An external control of file path vulnerability in a WatchGuard Fireware OS firewall diagnostic command allows a remote, authenticated attacker with at least read-only Device Monitor privileges and access to the management CLI to create, truncate, or overwrite arbitrary files and modify kernel...

EUVD-2026-111153

A stack-based buffer overflow vulnerability in the Fireware OS certd process allows an authenticated attacker with access to the Firebox management interface to crash the certificate management service and potentially execute arbitrary code by sending a specially crafted request...

EUVD-2026-111152

An XPath injection vulnerability in WatchGuard Fireware OS's SSH authentication process allows a remote, unauthenticated attacker with access to the management SSH interface to extract sensitive configuration data by submitting a specially crafted request...