Stack-based Buffer Overflow in Fireware OS VPN by WatchGuard
CVE-2026-113881

6.1MEDIUM

Key Information:

Vendor

Watchguard

Status
Fireware Os
Vendor
CVE Published:
27 October 2026

Badges

👾 Exploit Exists

What is CVE-2026-113881?

A stack-based buffer overflow in the VPN Network Access Enforcement component of WatchGuard's Fireware OS can be exploited by an authenticated mobile VPN user. By sending a specially crafted request, the attacker can induce a denial of service condition and may also execute arbitrary code within the context of an unprivileged process, potentially compromising the security of the affected system.

Affected Version(s)

Fireware OS Default 2025.1 < 2026.4

Fireware OS Default 12.9 < 12.12.4

References

https://psirt.watchguard.com/CVE-2026-113881
vendor-advisory

CVSS V4

Score:
6.1
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
Physical
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • 👾

    Exploit known to exist

  • Vulnerability published

  • Vulnerability Reserved

Credit

WatchGuard AI Security Research
.