CVE-2026-112710criticalCWE-122CWE-131

CVE-2026-112710: falha crítica em WatchGuard Fireware OS

Fireware OS Heap Buffer Overflow in AD Authentication Service Allows Pre-Authentication Remote Code Execution

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar Fireware OS

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

28Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 9.2epss 0.4%
A heap-based buffer overflow vulnerability exists in the Fireware OS authentication service allows an attacker who controls or intercepts traffic to the configured Active Directory server to create a denial of service condition and potentially execute arbitrary code by returning a specially crafted response.
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Produtos afetados
WatchGuard · Fireware OS
CVEs relacionadas — WatchGuard Fireware OS

No mesmo produto, das mais perigosas para as menos.

CVE-2025-9242CRITICALWatchGuard Firebox iked Out of Bounds Write VulnerabilityEPSS 92.2%KEVCVE-2025-14733CRITICALWatchGuard Firebox iked Out of Bounds Write VulnerabilityEPSS 29.4%KEVCVE-2026-3342HIGHWatchGuard Firebox Out of Bounds Write VulnerabilityEPSS 6.4%CVE-2022-31749MEDIUMAuthenticated arbitrary file read/write in WatchGuard Fireware OSEPSS 1.3%CVE-2024-5974HIGHFirebox Authenticated Buffer Overflow VulnerabilityEPSS 1.1%CVE-2026-13368CRITICALWatchGuard Firebox Race Condition and Use-After-Free in Mobile VPN with IKEv2 LDAP AuthenticationEPSS 0.9%