NLShown in its original language — a full translation is planned for a future version.
Kwetsbaarheden verholpen in WatchGuard Fireware OS
view advisory published 2026-10-07
WatchGuard heeft meerdere kwetsbaarheden verholpen in Fireware OS.
01
describes (21)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-86134US | high7.5 | — | ||
A NULL pointer dereference vulnerability in the WatchGuard Fireware OS authentication process allows a remote, unauthenticated attacker to crash the management daemon by sending a… | ||||
| CVE-2026-90441US | high8.1OT elevated | — | ||
A missing authorization vulnerability in the wgagent management daemon's session initialization function allows an authenticated, low-privileged user (including a read-only or gues… | ||||
| CVE-2026-86136US | high8.1OT elevated | — | ||
A missing authorization vulnerability in the wgagent management daemon's session initialization function allows an authenticated, low-privileged user (including a read-only or gues… | ||||
| CVE-2026-86133US | high7.5 | — | ||
An integer underflow vulnerability in the WatchGuard Fireware OS IKE daemon (iked) allows a remote attacker who has completed the initial IKEv2 handshake to crash the iked process… | ||||
| CVE-2026-86132US | high7.5 | — | ||
An integer underflow vulnerability in the WatchGuard Fireware OS IKEv2 daemon (iked) allows a remote, unauthenticated attacker to crash the process by sending a specially crafted e… | ||||
| CVE-2026-86131US | critical9.8 | — | ||
A code injection vulnerability in WatchGuard Fireware OS's BOVPN Over TLS client configuration handling allows an attacker who controls the remote VPN server to execute arbitrary c… | ||||
| CVE-2026-86128US | high7.5 | — | ||
A NULL pointer dereference vulnerability in Fireware OS's NetFlow packet-processing feature allows a remote, unauthenticated attacker to cause a denial of service by sending a spec… | ||||
| CVE-2026-86105US | high7.1 | — | ||
An improper authorization vulnerability in Fireware OS's Access Portal reverse proxy allows an authenticated, low-privileged Access Portal user to access other web applications the… | ||||
| CVE-2026-86104US | high7.5 | — | ||
An uncontrolled resource consumption vulnerability in the Fireware OS login process (wgagent) allows a remote, unauthenticated attacker to cause a denial of service by sending a sp… | ||||
| CVE-2026-86101US | medium6.5OT elevated | — | ||
An improper authorization vulnerability in WatchGuard Fireware OS's SAML login process allows a remote, authenticated SAML user with access only to the Access Portal to obtain unau… | ||||
| CVE-2026-81433US | — | — | ||
A stack-based buffer overflow vulnerability in WatchGuard Fireware OS's DHCP fingerprinting daemon (fingerd) allows an unauthenticated attacker with adjacent network access to exec… | ||||
| CVE-2026-18145US | high7.2 | — | ||
A stack-based buffer overflow vulnerability in the spamBlocker (spamd) service of WatchGuard Fireware OS allows an authenticated attacker with administrator privileges to crash the… | ||||
| CVE-2026-18105US | medium6.5 | — | ||
An uncontrolled resource consumption vulnerability in Fireware OS's diagnostic tasks feature allows a low-privileged, authenticated user to cause a denial of service of the system'… | ||||
| CVE-2026-13224US | medium4.9 | — | ||
A path traversal vulnerability in the Fireware OS WebUI management agent allows an authenticated administrator to read or list arbitrary files on the local filesystem by sending a… | ||||
| CVE-2026-13046US | high7.2 | — | ||
A deserialization of untrusted data vulnerability in WatchGuard Fireware OS's SAML single sign-on session handling (samld) allows an attacker who has already obtained the ability t… | ||||
| CVE-2026-86102US | —OT elevated | — | ||
An OS command injection vulnerability in the WatchGuard AP internal API service allows an attacker with network access to the AP to execute arbitrary shell commands on the underlyi… | ||||
| CVE-2026-86106US | —OT elevated | — | ||
An unauthenticated actor with network access to the private HA interconnect may trigger sensitive HA peer functions without verification. This could result in elevated command exec… | ||||
| CVE-2026-86135US | — | — | ||
A Cross-Site Request Forgery (CSRF) vulnerability in WatchGuard Dimension's database snapshot creation feature allows a remote attacker to trigger unauthorized snapshot creation by… | ||||
| CVE-2026-86137US | medium6.1 | — | ||
In libxml2 before 2.15.4, xmlFAParsePosCharGroup has an out-of-bounds read, aka an out-of-bounds read in the NXT macro in xmlregexp. | ||||
| CVE-2026-18146US | — | — | ||
The Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Notification Smartc… | ||||
showing 20 of 21
02
references
External citations — patches, advisories, analysis.
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan