CVE-2026-19313 (CVSS 9.3): WatchGuard Fireware Pre-Authentication Remote Code Execution Flaws Patched
ID: 1da2816f-620c-560b-a32c-8b5994370cec
STIX ID: report--1da2816f-620c-560b-a32c-8b5994370cec
Feed Name: securityonline.info
Threat Score
WatchGuard released patches addressing five critical (CVSS 9.3) vulnerabilities in Fireware and Dimension—three pre-auth IKE daemon (iked) bugs enabling potential remote code execution, a root-privilege buffer overflow in Mobile Security epm, and a session-token exposure in Dimension affecting multiple 2025–2026 and 12.x/2.x builds. Organizations should apply the 2026.2.2 / 12.12.2 / 12.5.20 / 2.3.1 updates immediately; WatchGuard reports no confirmed active exploitation.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.