An Out-of-bounds Write vulnerability in WatchGuard Fireware OS may allow an unauthenticated attacker on the same local network segment to execute arbitrary code. This vulnerability affects Fireware OS 11.0 up to and including 11.12.4_Update1, 12.0 up to and including 12.12 and 2025.1 up to and including 2026.2.
Fix
Patch, vendor advisory and mitigation references on NVD 1
- https://www.watchguard.com/wgrd-psirt/advisory/wgsa-2026-00026 Vendor Advisory
Every line above is quoted from NVD, CISA, Microsoft, the vendor's own advisory or DISA; nothing is generated.
Change history 1
- First seenCVSS 7.7 · watchguardNVD modified 2026-10-25 21:10
Affected (CPE criteria) 3
cpe:2.3:o:watchguard:fireware:*:*:*:*:*:*:*:*cpe:2.3:o:watchguard:fireware:11.12.4:-:*:*:*:*:*:*cpe:2.3:o:watchguard:fireware:11.12.4:u1:*:*:*:*:*:*
References 2
- https://psirt.watchguard.com/CVE-2026-8247 Broken Link
- https://www.watchguard.com/wgrd-psirt/advisory/wgsa-2026-00026 Vendor Advisory