Vulnerabilities

TI-2026-15751 CVE-2026-19313 · GHSA-w2pv-pjcj-h2vr

Fireware OS Pre-Authentication Heap Buffer Overflow in iked Allows Remote Code Execution

MEDIUM 49

An heap overflow vulnerability in the WatchGuard Fireware OS iked process allows a remote unauthenticated attacker to execute arbitrary code by sending specially crafted network traffic.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00707 Published 2026-08-27 Fixed in 2026.2.2, 12.12.2 +2 CWE-122

TI-2026-15756 CVE-2026-19318 · GHSA-hj2q-w426-x635

Fireware OS Pre-Authentication Stack Buffer Overflow in iked Allows Remote Code Execution

MEDIUM 49

A stack-based buffer overflow vulnerability in the WatchGuard Fireware OS iked process allows a remote unauthenticated attacker to execute arbitrary code by sending specially crafted network traffic.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00707 Published 2026-08-27 Fixed in 2026.2.2, 12.12.2 +2 CWE-121

Vulnerabilities

Filters

Fireware OS Pre-Authentication Heap Buffer Overflow in iked Allows Remote Code Execution

Fireware OS Pre-Authentication Stack Buffer Overflow in iked Allows Remote Code Execution