CVE-2026-19315: Out-of-bounds Read

A type confusion vulnerability in the iked process of WatchGuard Fireware OS allows a remote unauthenticated attacker to execute arbitrary code by sending specially crafted network traffic...

CVE-2026-42395

A host listed as a trusted proxy can send forwarding information containing a NUL byte, which crashes the login process on the following login attempt. The login process is terminated, which can cause degradation or denial of service for logins. Deployments that do not configure trusted proxies a...

PT-2026-83053

Name of the Vulnerable Software and Affected Versions dovecot versions prior to 2.4.5-1.1 Description An unauthenticated attacker can cause a denial of service for Sieve script management by sending a small malformed command before authentication, which crashes the ManageSieve login process. The...

PT-2026-83067

Name of the Vulnerable Software and Affected Versions dovecot versions prior to 2.4.5-1.1 Description An unauthenticated attacker can send an IMAP ID command containing an excessive number of parameters before authentication. This action causes disproportionate growth in memory and CPU usage,...

Python Library OpenEXR 3.4.0 < 3.4.13 DoS (CVE-2026-53532)

The version of the OpenEXR Python package installed on the remote host is 3.4.x prior to 3.4.13. It is, therefore, affected by a denial of service vulnerability: - A crafted HTJ2K-compressed EXR file causes an unconditional process abort in any application that calls exrstartread on untrusted...

CVE-2026-78614 Dimension SQL Injection in Audit Report

WatchGuard Dimension contains an authenticated SQL injection vulnerability in the audit report feature which allows an authenticated user with report administration permissions gain arbitrary command execution as the Dimension WebUI process user by sending specially crafted requests...

CVE-2026-19314 Fireware OS Integer Underflow in iked Allows Unauthenticated Denial of Service (DoS)

An integer underflow vulnerability in the WatchGuard Fireware OS iked process allows a remote unauthenticated attacker to create a Denial of Service DoS condition in VPN processing by sending specially crafted network traffic...

CVE-2026-78011

CVE-2026-78011 is an integer underflow vulnerability in the iked process of WatchGuard Fireware OS . A remote unauthenticated attacker can trigger a Denial of Service (DoS) in VPN processing by sending specially crafted network traffic . The CVSS 4.0 score is 8.7 (HIGH) , with a network attack ve...

CVE-2026-78011 Fireware OS Integer Underflow in Iked Allows Unauthenticated Denial of Service (DoS)

An integer underflow vulnerability in the WatchGuard Fireware OS iked process allows a remote unauthenticated attacker to create a Denial of Service DoS condition in VPN processing by sending specially crafted network traffic...

CVE-2026-19317 Fireware OS Pre-Authentication Out-of-Bounds Read in iked Allows Denial of Service (DoS)

An out-of-bounds read vulnerability in the WatchGuard Fireware OS iked process allows a remote unauthenticated attacker to create a Denial of Service DoS condition in VPN processing by sending specially crafted network traffic...

CVE-2026-19317 Fireware OS Pre-Authentication Out-of-Bounds Read in iked Allows Denial of Service (DoS)

An out-of-bounds read vulnerability in the WatchGuard Fireware OS iked process allows a remote unauthenticated attacker to create a Denial of Service DoS condition in VPN processing by sending specially crafted network traffic...

CVE-2026-19317

CVE-2026-19317 is an out-of-bounds read vulnerability in the iked process of WatchGuard Fireware OS , used for IPsec key exchange in VPN processing. A remote, unauthenticated attacker can trigger a Denial of Service condition by sending specially crafted network traffic, resulting in high impact ...

CVE-2026-19314

CVE-2026-19314 is an integer underflow vulnerability in the iked process of WatchGuard Fireware OS . A remote unauthenticated attacker can trigger a Denial of Service condition in VPN processing by sending specially crafted network traffic , resulting in a high availability impact (CVSS 4.0: 8.7 ...

CVE-2026-78009 Fireware OS Out-of-Bounds Read in iked Allows Unauthenticated Denial of Service (DoS)

An out-of-bounds read vulnerability in the WatchGuard Fireware OS iked process allows a remote unauthenticated attacker to create a Denial of Service DoS condition in VPN processing by sending specially crafted network traffic...

CVE-2026-78010

WatchGuard Fireware OS is affected by a stack-based buffer overflow in the iked process , allowing a remote unauthenticated attacker to trigger a Denial of Service (DoS) in VPN processing by sending specially crafted network traffic. The CVSS 4.0 score is 8.7 (HIGH) , reflecting a network attack ...

CVE-2026-19318 Fireware OS Pre-Authentication Stack Buffer Overflow in iked Allows Remote Code Execution

A stack-based buffer overflow vulnerability in the WatchGuard Fireware OS iked process allows a remote unauthenticated attacker to execute arbitrary code by sending specially crafted network traffic...

CVE-2026-78010 Fireware OS Stack-Based Buffer Overflow in iked Allows Unauthenticated Denial of Service

A stack-based buffer overflow vulnerability in the WatchGuard Fireware OS iked process iallows a remote unauthenticated attacker to create a Denial of Service DoS condition in VPN processing by sending specially crafted network traffic...

CVE-2026-19313 Fireware OS Pre-Authentication Heap Buffer Overflow in iked Allows Remote Code Execution

An heap overflow vulnerability in the WatchGuard Fireware OS iked process allows a remote unauthenticated attacker to execute arbitrary code by sending specially crafted network traffic...

CVE-2026-54084 Wazuh agent enrollment NULL pointer dereference via malformed manager response

Wazuh is an open-source security platform providing unified XDR and SIEM protection for endpoints and cloud workloads. In versions 4.0.0 through 4.14.6, a malicious or man-in-the-middle enrollment manager can crash a Wazuh agent during enrollment by returning a malformed key response with fewer...

CVE-2026-81851 Fireware OS Heap-Based Buffer Overflow in iked Allows Denial of Service

A heap-based buffer overflow vulnerability in Fireware OS's iked process allows an authenticated administrator to crash the IKE daemon iked, resulting in a denial of service, by saving a specially crafted configuration...