CVE-2026-13086

criticalpriority · track · 0OT risk · elevatedEPSS 0.007 · 51 %ileDENLUS

grimoire priorityP2 · Scheduled

Exploitable?

—

no known exploitation

Likely / severe?

0.66% (51st) EPSS

CVSS 9.3 · critical

Is it mine?

14 products

Check your exposure

Who says so?

3 sources

cert_bund · ncsc_nl · zdi

EPSS · scored 2026-10-27

A stack-based buffer overflow in the epm (Endpoint Protection Manager) service used by the deprecated Mobile Security feature in WatchGuard Fireware OS allows an unauthenticated remote attacker to execute arbitrary code.

cvss

Technical severity, 0–10. One row per scoring source.

9.3

010

base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · high–critical · 8.1–9.3

v4.09.3criticalCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:Xsecondary

v4.08.1highCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:Xsecondary · CVSS-BT (t0sche)

ssvc

A stakeholder decision — act, attend, or track — from exploitation and impact.

Exploitation: none · Automatable: yes · Technical Impact: totalcoordinatorcisa_ssvcUS

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-121USCWE-121USCWE-787USCWE-798US

affected products (14)

Products and version ranges known to be affected.

WatchGuard Firebox OS <12.12.1all versionscert_bundDE
WatchGuard Firebox OS <12.12.2all versionscert_bundDE
WatchGuard Firebox OS <2026.2.1all versionscert_bundDE
WatchGuard Firebox OS <2026.2.2all versionscert_bundDE
WatchGuard Firebox OS T15/T35 <12.5.18all versionscert_bundDE
WatchGuard Firebox OS T15/T35 <12.5.20all versionscert_bundDE
WatchGuard Firebox≤ OS <12.12.2cert_bundDE
WatchGuard Firebox≤ OS <12.12.1cert_bundDE
WatchGuard Firebox≤ OS <2026.2.1cert_bundDE
WatchGuard Firebox≤ OS <2026.2.2cert_bundDE
WatchGuard Firebox≤ OS T15/T35 <12.5.18cert_bundDE
WatchGuard Firebox≤ OS T15/T35 <12.5.20cert_bundDE
WatchGuard Firebox≤ vers:unknown/*ncsc_nlNL
WatchGuard Fireware OS≤ vers:unknown/*ncsc_nlNL

advisories (3)

Vendor and ecosystem advisories describing this.

NCSC-2026-0335Kwetsbaarheden verholpen in WatchGuard Fireware OSNL2026-09-01csaf · ncsc_nlNL
WatchGuard heeft kwetsbaarheden verholpen in WatchGuard Fireware OS, specifiek in het iked-proces en de epm-service van het Mobile Security onderdeel.
WID-SEC-W-2026-3068WatchGuard Firebox OS: Mehrere SchwachstellenDeutsch2026-08-27csaf · cert_bundDE
Ein Angreifer kann mehrere Schwachstellen in WatchGuard Firebox OS ausnutzen, um beliebigen Code – einschließlich Code mit Root-Rechten – auszuführen oder einen Denial-of-Service-Zustand herbeizuführen.
ZDI-26-632ZDI advisory ZDI-26-6322026-09-09vendor · zdiUS

sources

Which sources assert this record, and when.

cert_bund ncsc_nl zdi NVD CVE.org MITRE

published 2026-08-28modified 2026-09-03

references (1) nvd

External citations — patches, advisories, analysis.

https://psirt.watchguard.com/CVE-2026-13086

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan