CVE-2026-93866Critical· 9.2▾ MidnightAn integer overflow vulnerability in the WebSocket connection handling used by WatchGuard Fireware OS's Access Portal allows a remote, unauthenticated attacker to write beyond the bounds of a heap buffer by sending a specially crafted re…
▾ Midnight zone — Critical, or high with PoC / in-the-wild
impact 50.6 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
An integer overflow vulnerability in the WebSocket connection handling used by WatchGuard Fireware OS's Access Portal allows a remote, unauthenticated attacker to write beyond the bounds of a heap buffer by sending a specially crafted request while the Access Portal feature is enabled.
fireware_os >= 2025.1 < 2026.4fireware_os >= 12.0 < 12.12.4fireware_os >= 12.0 < 12.5.22Fireware OS 2026.4, Fireware OS 12.12.4, Fireware OS 12.5.22
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-93862High· 7.2Fireware OS Out-of-Bounds Read in FireCluster Sync Allows Denial of Service
CVE-2026-112709Critical· 9.2Fireware OS Heap Buffer Overflow in AD Authentication Service Allows Pre-Authentication Remote Code Execution
CVE-2026-103593Critical· 9.1Fireware OS Stack Buffer Overflow in Logging Service Allows Remote Code Execution
CVE-2026-90442High· 8.6Fireware OS Authenticated Stack Buffer Overflow in certd Allows Denial of Service
CVE-2026-93857Critical· 9.2Fireware OS Pre-Authentication Stack Buffer Overflow in SIP Proxy Allows Remote Code Execution
CVE-2026-103594Critical· 9.5Fireware OS Stack Buffer Overflow in WireGuard Configuration Allows Remote Code Execution