CVE-2026-112709

A heap-based buffer overflow vulnerability in the Fireware OS authentication service allows an attacker who controls or intercepts traffic to the configured Active Directory server to create a denial of service condition and potentially execute arbitrary code by returning a specially crafted response.

Score

CVSS 4.0 9.2 Critical

Status

Awaiting Analysis - 5d1c2695-1a31-4499-88ae-e847036fd7e3

Published

2026-10-27

Last modified

2026-10-28

Weaknesses

CWE-122, CWE-131, CWE-787

Affected products

• Fireware Os (Watchguard)

References

• https://psirt.watchguard.com/CVE-2026-112709