---
id: CVE-2026-18145
title: >-
  A stack-based buffer overflow vulnerability in the spamBlocker (spamd) service
  of WatchGuard Fireware OS allows an authenticated attacker with administrator
  privileges to crash the service or potentially execute arbitrary code by
  sending…
summary: >-
  A stack-based buffer overflow vulnerability in the spamBlocker (spamd) service
  of WatchGuard Fireware OS allows an authenticated attacker with administrator
  privileges to crash the service or potentially execute arbitrary code by
  sending…
severity: high
cvss: 7.2
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
cwe:
  - CWE-121
vendor: watchguard
product: fireware
affected:
  - 'fireware >= 12.0, < 12.5.21'
  - 'fireware >= 12.12, < 12.12.3'
  - 'fireware >= 2025.2, < 2026.2.3'
  - 'fireware >= 2026.3, < 2026.3.2'
patched:
  - fireware 2026.3.2
published: '2026-09-30'
updated: '2026-10-08'
sourceUpdated: '2026-10-08T19:48:38.593'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-18145'
references:
  - url: 'https://psirt.watchguard.com/CVE-2026-18145'
    label: 5d1c2695-1a31-4499-88ae-e847036fd7e3
tags:
  - nvd
  - cve.org
epss: 0.00389
epssPercentile: 0.32867
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: total
  timestamp: '2026-09-30T14:15:08.202136Z'
scores:
  nvd: 7.2
  cna: 8.6
ingestedAt: '2026-09-29T23:52:50.548Z'
---

## Overview

A stack-based buffer overflow vulnerability in the spamBlocker (spamd) service of WatchGuard Fireware OS allows an authenticated attacker with administrator privileges to crash the service or potentially execute arbitrary code by sending a specially crafted management request.

## Affected

- `fireware >= 12.0, < 12.5.21`
- `fireware >= 12.12, < 12.12.3`
- `fireware >= 2025.2, < 2026.2.3`
- `fireware >= 2026.3, < 2026.3.2`

## Remediation

Upgrade past the affected range:

- `fireware 2026.3.2`