Stack-Based Buffer Overflow in Fireware OS Certificate Management Service by WatchGuard
CVE-2026-90442

8.6HIGH

Key Information:

Vendor

Watchguard

Status
Fireware Os
Vendor
CVE Published:
27 October 2026

Badges

👾 Exploit Exists

What is CVE-2026-90442?

A stack-based buffer overflow vulnerability exists in the certificate management service of WatchGuard's Fireware OS. This flaw can be exploited by an authenticated attacker who has access to the Firebox management interface. By sending specially crafted requests, the attacker may cause a crash of the certificate management service and has the potential to execute arbitrary code, jeopardizing the security and integrity of the system.

Affected Version(s)

Fireware OS Default 2025.1 < 2026.4

Fireware OS Default 12.0 < 12.12.4

Fireware OS T15/T35 12.0 < 12.5.22

References

https://psirt.watchguard.com/CVE-2026-90442
vendor-advisory

CVSS V4

Score:
8.6
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • 👾

    Exploit known to exist

  • Vulnerability published

  • Vulnerability Reserved

Credit

Cody Sixteen
.