CVE-2026-112709 Fireware OS Heap Buffer Overflow in AD Authentication Service Allows Pre-Authentication Remote Code Execution
CriticalCVSS 9.2
EPSS 0.42%
- Published
- Updated
- Exploit status
- No public exploit known
Description
A heap-based buffer overflow vulnerability in the Fireware OS authentication service allows an attacker who controls or intercepts traffic to the configured Active Directory server to create a denial of service condition and potentially execute arbitrary code by returning a specially crafted response.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| WatchGuard Fireware OS | >= 2025.1, < 2026.4 | 2026.4 |
| WatchGuard Fireware OS | >= 12.0, < 12.12.4 | 12.12.4 |
| WatchGuard Fireware OS | >= 12.0, < 12.5.22 | 12.5.22 |
References
- psirt.watchguard.com vendor-advisory