CVE-2026-13086criticalCWE-121CWE-787CWE-798

CVE-2026-13086: falha crítica em WatchGuard Fireware OS

Fireware OS Stack-Based Buffer Overflow in Mobile Security epm Endpoint

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar Fireware OS

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

28Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 9.3epss 0.7%
A stack-based buffer overflow in the epm (Endpoint Protection Manager) service used by the deprecated Mobile Security feature in WatchGuard Fireware OS allows an unauthenticated remote attacker to execute arbitrary code.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Produtos afetados
WatchGuard · Fireware OS
CVEs relacionadas — WatchGuard Fireware OS

No mesmo produto, das mais perigosas para as menos.

CVE-2025-9242CRITICALWatchGuard Firebox iked Out of Bounds Write VulnerabilityEPSS 92.2%KEVCVE-2025-14733CRITICALWatchGuard Firebox iked Out of Bounds Write VulnerabilityEPSS 29.4%KEVCVE-2026-3342HIGHWatchGuard Firebox Out of Bounds Write VulnerabilityEPSS 6.4%CVE-2022-31749MEDIUMAuthenticated arbitrary file read/write in WatchGuard Fireware OSEPSS 1.3%CVE-2024-5974HIGHFirebox Authenticated Buffer Overflow VulnerabilityEPSS 1.1%CVE-2026-13368CRITICALWatchGuard Firebox Race Condition and Use-After-Free in Mobile VPN with IKEv2 LDAP AuthenticationEPSS 0.9%