Fireware OS
- Software type
- Network operating system
- Total vulnerabilities (90 days)
- Products & ServicesProducts & Services
- SolutionsSolutions
- PricingPricing
- CompanyCompany
- ResourcesResources
en
en
As of 11/08/2026, Fireware OS recorded 44 security vulnerabilities in the last 90 days, of which 39 are rated High or Critical. None of these vulnerabilities is actively exploited (KEV) according to CISA's catalog. CyStack recommends that organizations and individual users apply patches as soon as possible.
CyStack does not yet have sufficient official-source data to identify the latest version of Fireware OS and determine which vulnerabilities affect that version.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
CVE-2026-93866Fireware OS Pre-Authentication Integer Overflow in Access Portal Allows Out-of-Bounds WriteCVE-2026-93865Fireware OS Missing Authentication in FireCluster Sync Daemon Allows Remote Root Action InjectionCVE-2026-93864Fireware OS Link Following in firewalld Allows Local Arbitrary File Overwrite as RootCVE-2026-93862Fireware OS Out-of-Bounds Read in FireCluster Sync Allows Denial of ServiceCVE-2026-93857Fireware OS Pre-Authentication Stack Buffer Overflow in SIP Proxy Allows Remote Code Execution| Vulnerability | Exploitation status | Fix | Published | Severity |
|---|---|---|---|---|
CVE-2026-93866Fireware OS Pre-Authentication Integer Overflow in Access Portal Allows Out-of-Bounds Write | Exploitation statusNot confirmed | FixYes |
| SeverityCritical |
CVE-2026-93865Fireware OS Missing Authentication in FireCluster Sync Daemon Allows Remote Root Action Injection | Exploitation statusNot exploited | FixYes | Published10/27/2026 | SeverityCritical |
|---|
CVE-2026-93864Fireware OS Link Following in firewalld Allows Local Arbitrary File Overwrite as Root | Exploitation statusNot exploited | FixYes | Published10/27/2026 | SeverityHigh |
|---|
CVE-2026-93862Fireware OS Out-of-Bounds Read in FireCluster Sync Allows Denial of Service | Exploitation statusNot exploited | FixYes | Published10/27/2026 | SeverityHigh |
|---|
CVE-2026-93857Fireware OS Pre-Authentication Stack Buffer Overflow in SIP Proxy Allows Remote Code Execution | Exploitation statusNot exploited | FixYes | Published10/27/2026 | SeverityCritical |
|---|
CVE-2026-93434Fireware OS XPath Injection in SSH Authentication Allows Blind Extraction of Configuration Secrets | Exploitation statusNot confirmed | FixYes | Published10/27/2026 | SeverityHigh |
|---|
CVE-2026-90465WatchGuard Fireware OS FireCluster Sync Missing Authentication Enables Root Firewall Management Actions | Exploitation statusNot exploited | FixYes | Published10/27/2026 | SeverityCritical |
|---|
CVE-2026-90464Fireware OS Missing Command Validation allows Authenticated Arbitrary File Modification as Root | Exploitation statusNot confirmed | FixYes | Published10/27/2026 | SeverityHigh |
|---|
CVE-2026-90442Fireware OS Authenticated Stack Buffer Overflow in certd Allows Denial of Service | Exploitation statusNot confirmed | FixYes | Published10/27/2026 | SeverityHigh |
|---|
CVE-2026-82332Fireware OS Improper Authentication in AuthPoint MFA Verification Allows Session Hijacking | Exploitation statusNot confirmed | FixYes | Published10/27/2026 | SeverityMedium |
|---|
CVE-2026-113881Fireware OS Stack Buffer Overflow in VPN Network Access Enforcement Allows Unprivileged Code Execution | Exploitation statusNot confirmed | FixYes | Published10/27/2026 | SeverityMedium |
|---|
CVE-2026-112710Fireware OS Heap Buffer Overflow in AD Authentication Service Allows Pre-Authentication Remote Code Execution | Exploitation statusNot confirmed | FixYes | Published10/27/2026 | SeverityCritical |
|---|
CVE-2026-112709Fireware OS Heap Buffer Overflow in AD Authentication Service Allows Pre-Authentication Remote Code Execution | Exploitation statusNot confirmed | FixYes | Published10/27/2026 | SeverityCritical |
|---|
CVE-2026-111107Fireware OS NULL Pointer Dereference in Management Interface Allows Unauthenticated Denial of Service | Exploitation statusNot confirmed | FixYes | Published10/27/2026 | SeverityHigh |
|---|
CVE-2026-104381Fireware OS Missing Authentication in FireCluster State Sync Allows BOVPN Tunnel Denial of Service | Exploitation statusNot confirmed | FixYes | Published10/27/2026 | SeverityMedium |
|---|
CVE-2026-103594Fireware OS Stack Buffer Overflow in WireGuard Configuration Allows Remote Code Execution | Exploitation statusNot confirmed | FixYes | Published10/27/2026 | SeverityCritical |
|---|
CVE-2026-103593Fireware OS Stack Buffer Overflow in Logging Service Allows Remote Code Execution | Exploitation statusNot exploited | FixYes | Published10/27/2026 | SeverityCritical |
|---|
CVE-2026-86134Fireware OS Pre-Authentication NULL Pointer Dereference Allows Remote Denial of Service | Exploitation statusNot exploited | FixYes | Published09/30/2026 | SeverityHigh |
|---|
CVE-2026-90441Fireware OS Missing Authorization in wgagent Management API Allows Denial of Service - Variant B | Exploitation statusNot exploited | FixYes | Published09/29/2026 | SeverityHigh |
|---|
CVE-2026-86136Fireware OS Missing Authorization in wgagent Management API Allows Denial of Service - Variant A | Exploitation statusNot exploited | FixYes | Published09/29/2026 | SeverityHigh |
|---|
CVE-2026-86133Fireware OS Pre-Authentication Integer Underflow in iked Allows Remote Denial of Service | Exploitation statusNot exploited | FixYes | Published09/29/2026 | SeverityHigh |
|---|
CVE-2026-86132Fireware OS Pre-Authentication Integer Underflow in iked Allows Denial of Service | Exploitation statusNot exploited | FixYes | Published09/29/2026 | SeverityHigh |
|---|
CVE-2026-86131Fireware OS Code Injection in BOVPN Over TLS Client Allows Remote Code Execution | Exploitation statusNot exploited | FixYes | Published09/29/2026 | SeverityCritical |
|---|
CVE-2026-86128Fireware OS NULL Pointer Dereference in NetFlow IPv6 Traffic Processing Allows Remote Denial of Service | Exploitation statusNot exploited | FixYes | Published09/29/2026 | SeverityHigh |
|---|
CVE-2026-86105Fireware OS Improper Authorization in Access Portal Reverse Proxy | Exploitation statusNot exploited | FixYes | Published09/29/2026 | SeverityMedium |
|---|
CVE-2026-86104Fireware OS Resource Exhaustion in Login Process Allows Denial of Service | Exploitation statusNot exploited | FixYes | Published09/29/2026 | SeverityHigh |
|---|
CVE-2026-86101Fireware OS Authorization Bypass in SAML Login Allows Unauthorized SSLVPN Access | Exploitation statusNot exploited | FixYes | Published09/29/2026 | SeverityHigh |
|---|
CVE-2026-81433Fireware OS Pre-Authentication Stack Buffer Overflow in fingerd Allows Remote Code Execution | Exploitation statusNot exploited | FixYes | Published09/29/2026 | SeverityHigh |
|---|
CVE-2026-18145Fireware OS Stack-based Buffer Overflow in spamd Allows Remote Code Execution | Exploitation statusNot exploited | FixYes | Published09/29/2026 | SeverityHigh |
|---|
CVE-2026-18105Fireware OS Uncontrolled Resource Consumption in Diagnostic Tasks Allows Denial of Service | Exploitation statusNot exploited | FixYes | Published09/29/2026 | SeverityHigh |
|---|
CVE-2026-13224Fireware OS Path Traversal in WebUI Management Agent Allows Arbitrary Local File Read | Exploitation statusNot exploited | FixYes | Published09/29/2026 | SeverityHigh |
|---|
CVE-2026-13046Fireware OS Deserialization of Untrusted Data in samld Allows Remote Code Execution | Exploitation statusNot exploited | FixYes | Published09/29/2026 | SeverityHigh |
|---|
CVE-2026-81851Fireware OS Heap-Based Buffer Overflow in iked Allows Denial of Service | Exploitation statusNot exploited | FixYes | Published08/27/2026 | SeverityMedium |
|---|
CVE-2026-78011Fireware OS Integer Underflow in Iked Allows Unauthenticated Denial of Service (DoS) | Exploitation statusNot exploited | FixYes | Published08/27/2026 | SeverityHigh |
|---|
CVE-2026-78010Fireware OS Stack-Based Buffer Overflow in iked Allows Unauthenticated Denial of Service | Exploitation statusNot exploited | FixYes | Published08/27/2026 | SeverityHigh |
|---|
CVE-2026-78009Fireware OS Out-of-Bounds Read in iked Allows Unauthenticated Denial of Service (DoS) | Exploitation statusNot exploited | FixYes | Published08/27/2026 | SeverityHigh |
|---|
CVE-2026-78008Fireware OS Authenticated Buffer Overflow in wgagent | Exploitation statusNot exploited | FixYes | Published08/27/2026 | SeverityHigh |
|---|
CVE-2026-19318Fireware OS Pre-Authentication Stack Buffer Overflow in iked Allows Remote Code Execution | Exploitation statusNot exploited | FixYes | Published08/27/2026 | SeverityCritical |
|---|
CVE-2026-19317Fireware OS Pre-Authentication Out-of-Bounds Read in iked Allows Denial of Service (DoS) | Exploitation statusNot exploited | FixYes | Published08/27/2026 | SeverityHigh |
|---|
CVE-2026-19316Fireware OS Pre-Authentication Double Free in iked Allows Denial of Service (DoS) | Exploitation statusNot exploited | FixYes | Published08/27/2026 | SeverityHigh |
|---|
CVE-2026-19315Fireware OS Pre-Authentication Type Confusion in iked Allows Remote Code Execution | Exploitation statusNot exploited | FixYes | Published08/27/2026 | SeverityCritical |
|---|
CVE-2026-19314Fireware OS Integer Underflow in iked Allows Unauthenticated Denial of Service (DoS) | Exploitation statusNot exploited | FixYes | Published08/27/2026 | SeverityHigh |
|---|
CVE-2026-19313Fireware OS Pre-Authentication Heap Buffer Overflow in iked Allows Remote Code Execution | Exploitation statusNot exploited | FixYes | Published08/27/2026 | SeverityCritical |
|---|
CVE-2026-13086Fireware OS Stack-Based Buffer Overflow in Mobile Security epm Endpoint | Exploitation statusNot exploited | FixYes | Published08/27/2026 | SeverityCritical |
|---|
CVE-2026-8247WatchGuard Firebox admd Out of Bounds Write Vulnerability | Exploitation statusNot exploited | FixYes | Published07/02/2026 | SeverityHigh |
|---|
CVE-2026-13728WatchGuard Firebox Hardcoded Fallback Encryption Key in Access Portal Resource Credential Database | Exploitation statusNot exploited | FixYes | Published07/02/2026 | SeverityMedium |
|---|
CVE-2026-13722WatchGuard Firebox Firmware Image Validation Bypass in WatchGuard Fireware OS | Exploitation statusNot exploited | FixYes | Published07/02/2026 | SeverityHigh |
|---|
CVE-2026-13384WatchGuard Firebox wgagent Out of Bounds Write Vulnerability | Exploitation statusNot exploited | FixYes | Published07/02/2026 | SeverityHigh |
|---|
CVE-2026-13383WatchGuard Firebox ikestubd Out of Bounds Write Vulnerability | Exploitation statusNot exploited | FixYes | Published07/02/2026 | SeverityHigh |
|---|
CVE-2026-13377WatchGuard Firebox Stored Cross-Site-Scripting (XSS) Vulnerability in SIP Proxy Configuration | Exploitation statusNot exploited | FixYes | Published07/02/2026 | SeverityMedium |
|---|
91 Results | Page 1 of 2