Live › vulnerability › CVE-2026-113881
Go to dashboardA stack-based buffer overflow in the VPN Network Access Enforcement process of WatchGuard Fireware OS lets an authenticated mobile VPN user crash the service. The same flaw could let that user run arbitrary code as an unprivileged process.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-27 16:33 UTC. All times on this page are UTC.
Organizations running WatchGuard Firebox appliances with Fireware OS and mobile VPN enabled, where remote users authenticate to the VPN. Exposure depends on the specific Fireware version, which the sources do not list. Sites without mobile VPN users, or with the affected version not in use, can likely skip it.
No product ranges from the sources yet.
show version in the CLI), and compare it with the fixed versions in the vendor advisoryEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
A stack-based buffer overflow vulnerability in Fireware OS's VPN Network Access Enforcement process allows an authenticated mobile VPN user to create a denial of service condition and potentially execute arbitrary code as an unprivileged process by sending a specially crafted request.
This page as .md · .json · in your agent: get_signal("CVE-2026-113881")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.