{"id":"CVE-2026-19313","title":"An heap overflow vulnerability in the WatchGuard Fireware OS iked process allows a remote unauthenticated attacker to execute arbitrary code by sending specially crafted network traffic.","summary":"An heap overflow vulnerability in the WatchGuard Fireware OS iked process allows a remote unauthenticated attacker to execute arbitrary code by sending specially crafted network traffic.","severity":"critical","cwe":["CWE-122","CWE-190","CWE-680"],"published":"2026-08-28","updated":"2026-08-29","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-19313","references":[{"url":"https://psirt.watchguard.com/CVE-2026-19313","label":"5d1c2695-1a31-4499-88ae-e847036fd7e3"}],"tags":["nvd","cve.org"],"epss":0.00471,"epssPercentile":0.39946,"ingestedAt":"2026-08-29T21:42:36.571Z","vendor":"WatchGuard","product":"Fireware OS","affected":["fireware_os >= 2025.0 < 2026.2.2","fireware_os >= 12.0 < 12.12.2","fireware_os >= 12.0 < 12.5.20","fireware_os >= 2026.3 < 2026.3.1"],"cvss":9.3,"cvssVector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","ssvc":{"exploitation":"none","automatable":"yes","technicalImpact":"total","timestamp":"2026-08-28T00:00:00+00:00"},"cvssSource":"cna","slug":"CVE-2026-19313","body":"## Overview\n\nAn heap overflow vulnerability in the WatchGuard Fireware OS iked process allows a remote unauthenticated attacker to execute arbitrary code by sending specially crafted network traffic.\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"midnight","depthScore":51,"depthScoreParts":{"impact":51.2,"likelihood":0.1,"exploitation":0,"ransomware":0},"changes":[{"seq":201467,"id":"CVE-2026-19313","ts":1789399482610,"field":"cvss","old":null,"new":"9.3"},{"seq":201466,"id":"CVE-2026-19313","ts":1789399482610,"field":"severity","old":"none","new":"critical"},{"seq":200201,"id":"CVE-2026-19313","ts":1789397001352,"field":"cvss","old":"9.3","new":null},{"seq":200200,"id":"CVE-2026-19313","ts":1789397001352,"field":"severity","old":"critical","new":"none"},{"seq":198067,"id":"CVE-2026-19313","ts":1789384333603,"field":"cvss","old":null,"new":"9.3"},{"seq":198066,"id":"CVE-2026-19313","ts":1789384333603,"field":"severity","old":"none","new":"critical"},{"seq":195918,"id":"CVE-2026-19313","ts":1789383351172,"field":"cvss","old":"9.3","new":null},{"seq":195917,"id":"CVE-2026-19313","ts":1789383351172,"field":"severity","old":"critical","new":"none"},{"seq":194847,"id":"CVE-2026-19313","ts":1789380285155,"field":"cvss","old":null,"new":"9.3"},{"seq":194846,"id":"CVE-2026-19313","ts":1789380285155,"field":"severity","old":"none","new":"critical"},{"seq":193634,"id":"CVE-2026-19313","ts":1789378221179,"field":"cvss","old":"9.3","new":null},{"seq":193633,"id":"CVE-2026-19313","ts":1789378221179,"field":"severity","old":"critical","new":"none"},{"seq":192421,"id":"CVE-2026-19313","ts":1789376206923,"field":"cvss","old":null,"new":"9.3"},{"seq":192420,"id":"CVE-2026-19313","ts":1789376206923,"field":"severity","old":"none","new":"critical"},{"seq":191208,"id":"CVE-2026-19313","ts":1789373080871,"field":"cvss","old":"9.3","new":null},{"seq":191207,"id":"CVE-2026-19313","ts":1789373080871,"field":"severity","old":"critical","new":"none"},{"seq":189993,"id":"CVE-2026-19313","ts":1789369106788,"field":"cvss","old":null,"new":"9.3"},{"seq":189992,"id":"CVE-2026-19313","ts":1789369106788,"field":"severity","old":"none","new":"critical"},{"seq":188780,"id":"CVE-2026-19313","ts":1789368012463,"field":"cvss","old":"9.3","new":null},{"seq":188779,"id":"CVE-2026-19313","ts":1789368012463,"field":"severity","old":"critical","new":"none"},{"seq":187563,"id":"CVE-2026-19313","ts":1789364977751,"field":"cvss","old":null,"new":"9.3"},{"seq":187562,"id":"CVE-2026-19313","ts":1789364977751,"field":"severity","old":"none","new":"critical"},{"seq":186350,"id":"CVE-2026-19313","ts":1789362953269,"field":"cvss","old":"9.3","new":null},{"seq":186349,"id":"CVE-2026-19313","ts":1789362953269,"field":"severity","old":"critical","new":"none"},{"seq":185136,"id":"CVE-2026-19313","ts":1789360949779,"field":"cvss","old":null,"new":"9.3"},{"seq":185135,"id":"CVE-2026-19313","ts":1789360949779,"field":"severity","old":"none","new":"critical"},{"seq":183923,"id":"CVE-2026-19313","ts":1789357880162,"field":"cvss","old":"9.3","new":null},{"seq":183922,"id":"CVE-2026-19313","ts":1789357880162,"field":"severity","old":"critical","new":"none"},{"seq":182175,"id":"CVE-2026-19313","ts":1789354073640,"field":"cvss","old":null,"new":"9.3"},{"seq":182174,"id":"CVE-2026-19313","ts":1789354073640,"field":"severity","old":"none","new":"critical"},{"seq":180968,"id":"CVE-2026-19313","ts":1789352901502,"field":"cvss","old":"9.3","new":null},{"seq":180967,"id":"CVE-2026-19313","ts":1789352901502,"field":"severity","old":"critical","new":"none"},{"seq":179761,"id":"CVE-2026-19313","ts":1789349972462,"field":"cvss","old":null,"new":"9.3"},{"seq":179760,"id":"CVE-2026-19313","ts":1789349972462,"field":"severity","old":"none","new":"critical"},{"seq":178554,"id":"CVE-2026-19313","ts":1789347760095,"field":"cvss","old":"9.3","new":null},{"seq":178553,"id":"CVE-2026-19313","ts":1789347760095,"field":"severity","old":"critical","new":"none"},{"seq":177347,"id":"CVE-2026-19313","ts":1789346156047,"field":"cvss","old":null,"new":"9.3"},{"seq":177346,"id":"CVE-2026-19313","ts":1789346156047,"field":"severity","old":"none","new":"critical"},{"seq":176140,"id":"CVE-2026-19313","ts":1789342699101,"field":"cvss","old":"9.3","new":null},{"seq":176139,"id":"CVE-2026-19313","ts":1789342699101,"field":"severity","old":"critical","new":"none"},{"seq":175856,"id":"CVE-2026-19313","ts":1789338766183,"field":"cvss","old":null,"new":"9.3"},{"seq":175855,"id":"CVE-2026-19313","ts":1789338766183,"field":"severity","old":"none","new":"critical"},{"seq":175464,"id":"CVE-2026-19313","ts":1789338352658,"field":"cvss","old":"9.3","new":null},{"seq":175463,"id":"CVE-2026-19313","ts":1789338352658,"field":"severity","old":"critical","new":"none"},{"seq":174259,"id":"CVE-2026-19313","ts":1789334575511,"field":"cvss","old":null,"new":"9.3"},{"seq":174258,"id":"CVE-2026-19313","ts":1789334575511,"field":"severity","old":"none","new":"critical"},{"seq":173054,"id":"CVE-2026-19313","ts":1789333178030,"field":"cvss","old":"9.3","new":null},{"seq":173053,"id":"CVE-2026-19313","ts":1789333178030,"field":"severity","old":"critical","new":"none"},{"seq":171868,"id":"CVE-2026-19313","ts":1789330865303,"field":"cvss","old":null,"new":"9.3"},{"seq":171867,"id":"CVE-2026-19313","ts":1789330865303,"field":"severity","old":"none","new":"critical"}]}