{"id":"CVE-2026-18145","title":"A stack-based buffer overflow vulnerability in the spamBlocker (spamd) service of WatchGuard Fireware OS allows an authenticated attacker with administrator privileges to crash the service or potentially execute arbitrary code by sending…","summary":"A stack-based buffer overflow vulnerability in the spamBlocker (spamd) service of WatchGuard Fireware OS allows an authenticated attacker with administrator privileges to crash the service or potentially execute arbitrary code by sending…","severity":"high","cvss":7.2,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","cwe":["CWE-121"],"vendor":"watchguard","product":"fireware","affected":["fireware >= 12.0, < 12.5.21","fireware >= 12.12, < 12.12.3","fireware >= 2025.2, < 2026.2.3","fireware >= 2026.3, < 2026.3.2"],"patched":["fireware 2026.3.2"],"published":"2026-09-30","updated":"2026-10-08","sourceUpdated":"2026-10-08T19:48:38.593","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-18145","references":[{"url":"https://psirt.watchguard.com/CVE-2026-18145","label":"5d1c2695-1a31-4499-88ae-e847036fd7e3"}],"tags":["nvd","cve.org"],"epss":0.00389,"epssPercentile":0.32867,"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"total","timestamp":"2026-09-30T14:15:08.202136Z"},"scores":{"nvd":7.2,"cna":8.6},"ingestedAt":"2026-09-29T23:52:50.548Z","slug":"CVE-2026-18145","body":"## Overview\n\nA stack-based buffer overflow vulnerability in the spamBlocker (spamd) service of WatchGuard Fireware OS allows an authenticated attacker with administrator privileges to crash the service or potentially execute arbitrary code by sending a specially crafted management request.\n\n## Affected\n\n- `fireware >= 12.0, < 12.5.21`\n- `fireware >= 12.12, < 12.12.3`\n- `fireware >= 2025.2, < 2026.2.3`\n- `fireware >= 2026.3, < 2026.3.2`\n\n## Remediation\n\nUpgrade past the affected range:\n\n- `fireware 2026.3.2`","depth":"twilight","depthScore":40,"depthScoreParts":{"impact":39.6,"likelihood":0.1,"exploitation":0,"ransomware":0},"changes":[{"seq":218264,"id":"CVE-2026-18145","ts":1791490022272,"field":"cvss","old":"8.6","new":"7.2"}]}