DeutschShown in its original language — a full translation is planned for a future version.
WatchGuard Firebox OS: Mehrere Schwachstellen
view advisory published 2026-08-27
Ein Angreifer kann mehrere Schwachstellen in WatchGuard Firebox OS ausnutzen, um beliebigen Code – einschließlich Code mit Root-Rechten – auszuführen oder einen Denial-of-Service-Zustand herbeizuführen.
01
describes (12)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-78011US | — | — | ||
An integer underflow vulnerability in the WatchGuard Fireware OS iked process allows a remote unauthenticated attacker to create a Denial of Service (DoS) condition in VPN processi… | ||||
| CVE-2026-78010US | — | — | ||
A stack-based buffer overflow vulnerability in the WatchGuard Fireware OS iked process iallows a remote unauthenticated attacker to create a Denial of Service (DoS) condition in VP… | ||||
| CVE-2026-78009US | — | — | ||
An out-of-bounds read vulnerability in the WatchGuard Fireware OS iked process allows a remote unauthenticated attacker to create a Denial of Service (DoS) condition in VPN process… | ||||
| CVE-2026-78008US | — | — | ||
A buffer overflow vulnerability in the WatchGuard Fireware OS Management Web UI allows an authenticated administrator with network access to cause a denial of service (DoS) conditi… | ||||
| CVE-2026-19318US | — | — | ||
A stack-based buffer overflow vulnerability in the WatchGuard Fireware OS iked process allows a remote unauthenticated attacker to execute arbitrary code by sending specially craft… | ||||
| CVE-2026-19317US | — | — | ||
An out-of-bounds read vulnerability in the WatchGuard Fireware OS iked process allows a remote unauthenticated attacker to create a Denial of Service (DoS) condition in VPN process… | ||||
| CVE-2026-19316US | — | — | ||
A double-free vulnerability in the WatchGuard Fireware OS iked process allows a remote unauthenticated attacker to create a Denial of Service (DoS) condition in VPN processing by s… | ||||
| CVE-2026-19315US | — | — | ||
A type confusion vulnerability in the iked process of WatchGuard Fireware OS allows a remote unauthenticated attacker to execute arbitrary code by sending specially crafted network… | ||||
| CVE-2026-19314US | — | — | ||
An integer underflow vulnerability in the WatchGuard Fireware OS iked process allows a remote unauthenticated attacker to create a Denial of Service (DoS) condition in VPN processi… | ||||
| CVE-2026-19313US | — | — | ||
An heap overflow vulnerability in the WatchGuard Fireware OS iked process allows a remote unauthenticated attacker to execute arbitrary code by sending specially crafted network tr… | ||||
| CVE-2026-13086US | —OT elevated | — | ||
A stack-based buffer overflow in the epm (Endpoint Protection Manager) service used by the deprecated Mobile Security feature in WatchGuard Fireware OS allows an unauthenticated re… | ||||
| CVE-2026-81851US | — | — | ||
A heap-based buffer overflow vulnerability in Fireware OS's iked process allows an authenticated administrator to crash the IKE daemon (iked), resulting in a denial of service, by… | ||||
02
references
External citations — patches, advisories, analysis.
- WatchGuard PSIRT Advisories vom 2026-08-27external
- CVE-2026-13086 Fireware OS Pre-Authentication Heap Buffer Overflow in iked Allows Remote Code Execution vom 2026-08-27external
- CVE-2026-19313 Fireware OS Pre-Authentication Heap Buffer Overflow in iked Allows Remote Code Execution vom 2026-08-27external
- CVE-2026-19314 Fireware OS Integer Underflow in iked Allows Unauthenticated Denial of Service (DoS) vom 2026-08-27external
- CVE-2026-19315 Fireware OS Pre-Authentication Type Confusion in iked Allows Remote Code Execution vom 2026-08-27external
- CVE-2026-19316 Fireware OS Pre-Authentication Use-After-Free in iked Allows Remote Code Execution vom 2026-08-27external
- CVE-2026-19317 Fireware OS Pre-Authentication Out-of-Bounds Read in iked Allows Denial of Service (DoS) vom 2026-08-27external
- CVE-2026-19318 Fireware OS Pre-Authentication Stack Buffer Overflow in iked Allows Remote Code Execution vom 2026-08-27external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan