---
id: CVE-2026-90442
title: >-
  Fireware OS Authenticated Stack Buffer Overflow in certd Allows Denial of
  Service
summary: >-
  A stack-based buffer overflow vulnerability in the Fireware OS certd process
  allows an authenticated attacker with access to the Firebox management
  interface to crash the certificate management service and potentially execute
  arbitrary c…
severity: high
cvss: 8.6
cvssVector: 'CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L'
cvssSource: cna
cwe:
  - CWE-121
  - CWE-787
vendor: WatchGuard
product: Fireware OS
affected:
  - fireware_os >= 2025.1 < 2026.4
  - fireware_os >= 12.0 < 12.12.4
  - fireware_os >= 12.0 < 12.5.22
published: '2026-10-27'
updated: '2026-10-27'
sourceUpdated: '2026-10-27T15:52:28.165Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-90442'
references:
  - url: 'https://psirt.watchguard.com/CVE-2026-90442'
tags:
  - cve.org
ingestedAt: '2026-10-27T16:11:59.477Z'
---

## Overview

A stack-based buffer overflow vulnerability in the Fireware OS certd process allows an authenticated attacker with access to the Firebox management interface to crash the certificate management service and potentially execute arbitrary code by sending a specially crafted request.

## Affected

- `fireware_os >= 2025.1 < 2026.4`
- `fireware_os >= 12.0 < 12.12.4`
- `fireware_os >= 12.0 < 12.5.22`

## Remediation

Fireware OS 2026.4, Fireware OS 12.12.4, Fireware OS 12.5.22