Live › vulnerability › CVE-2026-111107
Go to dashboardA NULL pointer dereference in the management interface of WatchGuard Fireware OS lets an unauthenticated remote attacker send a specially crafted login request that crashes the management service. Repeated exploitation ends all active administrator sessions and blocks management of the device, though traffic processing is not affected.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-27 16:33 UTC. All times on this page are UTC.
Organizations running WatchGuard Fireware OS firewalls whose management interface is reachable from the network by an attacker. Devices where the management interface is restricted to trusted administrative networks have a much smaller exposure. The sources do not list affected Fireware versions.
No product ranges from the sources yet.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
A NULL pointer dereference vulnerability in WatchGuard Fireware OS’s management interface allows a remote, unauthenticated attacker with network access to the management interface to crash the management service by sending a specially crafted login request. Repeated exploitation terminates all active administrator sessions and in-progress management operations and can prevent management of the device. Traffic processing is not affected.
This page as .md · .json · in your agent: get_signal("CVE-2026-111107")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.