BaselineWatch
Desk

CVE-2026-18145

8.6 high SSVC exploitation: none Analyzed

A stack-based buffer overflow vulnerability in the spamBlocker (spamd) service of WatchGuard Fireware OS allows an authenticated attacker with administrator privileges to crash the service or potentially execute arbitrary code by sending a specially crafted management request.

Fix

Patch, vendor advisory and mitigation references on NVD 1

Vendor advisories in the News 1

Every line above is quoted from NVD, CISA, Microsoft, the vendor's own advisory or DISA; nothing is generated.

Change history 1

  1. First seenCVSS 8.6 · watchguardNVD modified 2026-10-08 19:48

Affected (CPE criteria) 1

  • cpe:2.3:o:watchguard:fireware:*:*:*:*:*:*:*:*

References 1