A stack-based buffer overflow vulnerability in the spamBlocker (spamd) service of WatchGuard Fireware OS allows an authenticated attacker with administrator privileges to crash the service or potentially execute arbitrary code by sending a specially crafted management request.
Fix
Patch, vendor advisory and mitigation references on NVD 1
- https://psirt.watchguard.com/CVE-2026-18145 Patch, Vendor Advisory
Vendor advisories in the News 1
- ZDI-26-750: WatchGuard FireWare OS spamd statushdlr Stack-based Buffer Overflow Remote Code Execution Vulnerability Zero Day Initiative: published advisories · 2026-09-30
Every line above is quoted from NVD, CISA, Microsoft, the vendor's own advisory or DISA; nothing is generated.
Change history 1
- First seenCVSS 8.6 · watchguardNVD modified 2026-10-08 19:48
Affected (CPE criteria) 1
cpe:2.3:o:watchguard:fireware:*:*:*:*:*:*:*:*
References 1
- https://psirt.watchguard.com/CVE-2026-18145 Patch, Vendor Advisory