CVE-2026-18145High· 8.6▾ TwilightA stack-based buffer overflow vulnerability in the spamBlocker (spamd) service of WatchGuard Fireware OS allows an authenticated attacker with administrator privileges to crash the service or potentially execute arbitrary code by sending…
▾ Twilight zone — High severity, or a signal on a lesser flaw
impact 47.3 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
A stack-based buffer overflow vulnerability in the spamBlocker (spamd) service of WatchGuard Fireware OS allows an authenticated attacker with administrator privileges to crash the service or potentially execute arbitrary code by sending a specially crafted management request.
fireware_os >= 2026.3 < 2026.3.2fireware_os >= 2025.0 < 2026.2.3fireware_os >= 12.0 < 12.12.3fireware_os >= 12.0 < 12.5.21Fireware OS 2026.3.2, Fireware OS 2026.2.3, Fireware OS 12.12.3, Fireware OS 12.5.21
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-81433High· 8.7Fireware OS Pre-Authentication Stack Buffer Overflow in fingerd Allows Remote Code Execution
CVE-2026-86128High· 8.2Fireware OS NULL Pointer Dereference in NetFlow IPv6 Traffic Processing Allows Remote Denial of Service
CVE-2026-86101High· 7.2Fireware OS Authorization Bypass in SAML Login Allows Unauthorized SSLVPN Access
CVE-2026-86136High· 7.1Fireware OS Missing Authorization in wgagent Management API Allows Denial of Service - Variant A
CVE-2026-86132High· 8.2Fireware OS Pre-Authentication Integer Underflow in iked Allows Denial of Service
CVE-2026-86105Medium· 5.3Fireware OS Improper Authorization in Access Portal Reverse Proxy