Live › vulnerability › CVE-2026-112710
Go to dashboardA heap buffer overflow in the Fireware OS authentication service is triggered when a malicious or intercepted Active Directory server returns a specially crafted response. The result is a denial of service and potentially arbitrary code execution on the firewall.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-27 16:33 UTC. All times on this page are UTC.
Firewalls running Fireware OS whose authentication service is configured to talk to an Active Directory server. An attacker must control or intercept traffic to that AD server, so exposure depends on network path. Devices without AD authentication configured are not described as affected by the sources.
No product ranges from the sources yet.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
A heap-based buffer overflow vulnerability exists in the Fireware OS authentication service allows an attacker who controls or intercepts traffic to the configured Active Directory server to create a denial of service condition and potentially execute arbitrary code by returning a specially crafted response.
This page as .md · .json · in your agent: get_signal("CVE-2026-112710")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.