Live › vulnerability › CVE-2026-103593
Go to dashboardA stack-based buffer overflow in the Fireware OS logging service is triggered when a crafted certificate is presented by a log server the device connects to. An attacker who can impersonate or intercept traffic to that log server can run arbitrary code as root on the appliance.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-27 16:33 UTC. All times on this page are UTC.
Organizations running WatchGuard Fireware OS firewalls that send logs to a configured log server over a network path an attacker could intercept or impersonate. Devices that do not forward logs to a remote server, or whose log traffic stays on a trusted, protected path, are less exposed; the sources do not name affected versions.
No product ranges from the sources yet.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
A stack-based buffer overflow vulnerability in the Fireware OS logging service allows a network-adjacent attacker who can impersonate or intercept traffic to the configured log server to execute arbitrary code with root privileges by presenting a specially crafted certificate.
This page as .md · .json · in your agent: get_signal("CVE-2026-103593")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.