8.6Alta

CVE-2026-90442Fireware OS Authenticated Stack Buffer Overflow in certd Allows Denial of Service

WatchGuard Fireware OS Publicada: (hace 14 días)

Descripción

A stack-based buffer overflow vulnerability in the Fireware OS certd process allows an authenticated attacker with access to the Firebox management interface to crash the certificate management service and potentially execute arbitrary code by sending a specially crafted request.

Debilidad (CWE): CWE-121CWE-787

Datos: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Se publican tal como los indican las fuentes, en inglés.

Productos y versiones afectados

FabricanteProductoVersiones
WatchGuard Fireware OS 2025.1 – < 2026.4, 12.0 – < 12.12.4

Referencias y parches