Live › vulnerability › CVE-2026-90442
Go to dashboardA stack-based buffer overflow in the certd certificate management process of WatchGuard Fireware OS lets an attacker who can reach the Firebox management interface crash the service. The sources say it could also be used to execute arbitrary code via a specially crafted request.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-27 16:33 UTC. All times on this page are UTC.
Organizations running WatchGuard Firebox appliances with a vulnerable Fireware OS version where users can reach the management interface. The attacker needs valid credentials or an authenticated session for that interface. Devices already on a fixed release, or with the management interface restricted to trusted networks, carry less exposure.
No product ranges from the sources yet.
show version in the CLI) and compare it against the fixed version in the vendor advisory.Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
A stack-based buffer overflow vulnerability in the Fireware OS certd process allows an authenticated attacker with access to the Firebox management interface to crash the certificate management service and potentially execute arbitrary code by sending a specially crafted request.
This page as .md · .json · in your agent: get_signal("CVE-2026-90442")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.