CVE-2026-93866 Fireware OS Pre-Authentication Integer Overflow in Access Portal Allows Out-of-Bounds Write
CriticalCVSS 9.2
EPSS 0.51%
- Published
- Updated
- Exploit status
- No public exploit known
Description
An integer overflow vulnerability in the WebSocket connection handling used by WatchGuard Fireware OS's Access Portal allows a remote, unauthenticated attacker to write beyond the bounds of a heap buffer by sending a specially crafted request while the Access Portal feature is enabled.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| WatchGuard Fireware OS | >= 2025.1, < 2026.4 | 2026.4 |
| WatchGuard Fireware OS | >= 12.0, < 12.12.4 | 12.12.4 |
| WatchGuard Fireware OS | >= 12.0, < 12.5.22 | 12.5.22 |
References
- psirt.watchguard.com vendor-advisory