Warning: Multiple Vulnerabilities Identified in WatchGuard Fireware OS, Including Remote Code Execution , Patch Immediately!
ID: 91358bc0-2467-5ea6-bbf9-a1ca6fb46206
STIX ID: report--91358bc0-2467-5ea6-bbf9-a1ca6fb46206
**WatchGuard Fireware OS vulnerabilities:** Multiple high-severity vulnerabilities affect several Fireware OS release ranges — most critically CVE-2026-86131, an unauthenticated code-injection/RCE via BOVPN over TLS that can result in root-level compromise when a Firebox connects to a malicious VPN server; other issues include stack-buffer overflows (CVE-2026-81433, CVE-2026-18145) and resource exhaustion/DoS (CVE-2026-86104). Vendor patches are available and the CCB recommends prioritizing updates and increasing detection and monitoring, noting no observed exploitation in the wild to date.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.
