A heap-based buffer overflow vulnerability exists in the Fireware OS authentication service allows an attacker who controls or intercepts traffic to the configured Active Directory server to create a denial of service condition and potentially execute arbitrary code by returning a specially crafted response.
Critical 9.2
CVE-2026-112710
WatchGuard Fireware OS — remote code execution.
A heap-based buffer overflow vulnerability exists in the Fireware OS authentication service allows an attacker who controls or intercepts traffic to the configured Active Directory server to create a denial of service…
Published Updated Source NVD
CVSS 4.0
9.2
AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Exploit chance, 30 days
0.4%
Higher than 36% of all CVEs (EPSS)
Status
No known exploitation
Not in CISA KEV
Patch
Unknown
Check the vendor advisory
What happened
What to do
- 01Check whether you run WatchGuard Fireware OS, and which version.
- 02Follow the vendor advisory for a fix or a workaround.
References
Timeline · UTC
- Published to NVD
- NVD record updated
Also actively exploited
Other CVEs in WatchGuard Fireware OS
6 more CVEs
9.2WatchGuard Fireware OS — integer overflow.EPSS 0.5%9.2WatchGuard Fireware OS — remote code execution.EPSS 0.6%9.2WatchGuard Fireware OS — command injection.EPSS 0.5%9.4WatchGuard Fireware OS — command injection.EPSS 0.2%9.2WatchGuard Fireware OS — remote code execution.EPSS 0.4%9.5WatchGuard Fireware OS — remote code execution.EPSS 0.4%