DeutschShown in its original language — a full translation is planned for a future version.
WatchGuard Fireware OS: Mehrere Schwachstellen
view advisory published 2026-09-29
Ein entfernter Angreifer kann mehrere Schwachstellen in WatchGuard Fireware OS ausnutzen, um beliebigen Code auszuführen – einschließlich Code mit Root-Rechten –, Sicherheitsmaßnahmen zu umgehen, vertrauliche Daten offenzulegen oder zu manipulieren und Denial-of-Service-Zustände zu verursachen.
01
describes (15)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-86134US | high7.5 | — | ||
A NULL pointer dereference vulnerability in the WatchGuard Fireware OS authentication process allows a remote, unauthenticated attacker to crash the management daemon by sending a… | ||||
| CVE-2026-90441US | high8.1OT elevated | — | ||
A missing authorization vulnerability in the wgagent management daemon's session initialization function allows an authenticated, low-privileged user (including a read-only or gues… | ||||
| CVE-2026-86136US | high8.1OT elevated | — | ||
A missing authorization vulnerability in the wgagent management daemon's session initialization function allows an authenticated, low-privileged user (including a read-only or gues… | ||||
| CVE-2026-86133US | high7.5 | — | ||
An integer underflow vulnerability in the WatchGuard Fireware OS IKE daemon (iked) allows a remote attacker who has completed the initial IKEv2 handshake to crash the iked process… | ||||
| CVE-2026-86132US | high7.5 | — | ||
An integer underflow vulnerability in the WatchGuard Fireware OS IKEv2 daemon (iked) allows a remote, unauthenticated attacker to crash the process by sending a specially crafted e… | ||||
| CVE-2026-86131US | critical9.8 | — | ||
A code injection vulnerability in WatchGuard Fireware OS's BOVPN Over TLS client configuration handling allows an attacker who controls the remote VPN server to execute arbitrary c… | ||||
| CVE-2026-86128US | high7.5 | — | ||
A NULL pointer dereference vulnerability in Fireware OS's NetFlow packet-processing feature allows a remote, unauthenticated attacker to cause a denial of service by sending a spec… | ||||
| CVE-2026-86105US | high7.1 | — | ||
An improper authorization vulnerability in Fireware OS's Access Portal reverse proxy allows an authenticated, low-privileged Access Portal user to access other web applications the… | ||||
| CVE-2026-86104US | high7.5 | — | ||
An uncontrolled resource consumption vulnerability in the Fireware OS login process (wgagent) allows a remote, unauthenticated attacker to cause a denial of service by sending a sp… | ||||
| CVE-2026-86101US | medium6.5OT elevated | — | ||
An improper authorization vulnerability in WatchGuard Fireware OS's SAML login process allows a remote, authenticated SAML user with access only to the Access Portal to obtain unau… | ||||
| CVE-2026-81433US | — | — | ||
A stack-based buffer overflow vulnerability in WatchGuard Fireware OS's DHCP fingerprinting daemon (fingerd) allows an unauthenticated attacker with adjacent network access to exec… | ||||
| CVE-2026-18145US | high7.2 | — | ||
A stack-based buffer overflow vulnerability in the spamBlocker (spamd) service of WatchGuard Fireware OS allows an authenticated attacker with administrator privileges to crash the… | ||||
| CVE-2026-18105US | medium6.5 | — | ||
An uncontrolled resource consumption vulnerability in Fireware OS's diagnostic tasks feature allows a low-privileged, authenticated user to cause a denial of service of the system'… | ||||
| CVE-2026-13224US | medium4.9 | — | ||
A path traversal vulnerability in the Fireware OS WebUI management agent allows an authenticated administrator to read or list arbitrary files on the local filesystem by sending a… | ||||
| CVE-2026-13046US | high7.2 | — | ||
A deserialization of untrusted data vulnerability in WatchGuard Fireware OS's SAML single sign-on session handling (samld) allows an attacker who has already obtained the ability t… | ||||
02
references
External citations — patches, advisories, analysis.
- WatchGuard PSIRT Advisories vom 2026-09-29external
- WatchGuard PSIRT Advisory CVE-2026-13046 vom 2026-09-29external
- WatchGuard PSIRT Advisory CVE-2026-13047 vom 2026-09-29external
- WatchGuard PSIRT Advisory CVE-2026-13225 vom 2026-09-29external
- WatchGuard PSIRT Advisory CVE-2026-18145 vom 2026-09-29external
- WatchGuard PSIRT Advisory CVE-2026-18146 vom 2026-09-29external
- WatchGuard PSIRT Advisory CVE-2026-81434 vom 2026-09-29external
- WatchGuard PSIRT Advisory CVE-2026-86102 vom 2026-09-29external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan