CVE-2026-90442

A stack-based buffer overflow vulnerability in the Fireware OS certd process allows an authenticated attacker with access to the Firebox management interface to crash the certificate management service and potentially execute arbitrary code by sending a specially crafted request.

Score

CVSS 4.0 8.6 High

Status

Awaiting Analysis - 5d1c2695-1a31-4499-88ae-e847036fd7e3

Published

2026-10-27

Last modified

2026-10-28

Weaknesses

CWE-121, CWE-787

Affected products

• Fireware Os (Watchguard)

References

• https://psirt.watchguard.com/CVE-2026-90442