Skip to content
OpenAdvisories
Critical · 9.5 CVE-2026-103594 EUVD-2026-111159GHSA-69hq-vhp9-m5w6

Fireware OS Stack Buffer Overflow in WireGuard Configuration Allows Remote Code Execution

Published Oct 27, 2026 · Updated Nov 4, 2026 · Assigned by WatchGuard

Description

A stack-based buffer overflow vulnerability in Fireware OS's WireGuard configuration processing allows a remote attacker that has man-in-the-middle TLS-decrypted access between the Firebox and WatchGuard Cloud to create a Denial of Service condition and potentially execute arbitrary code by tampering with a FireCloud Gateway configuration payload.

Affected products

VendorProductAffectedFixed
WatchGuard Fireware OS 2026.2 – < 2026.4, 12.12 – < 12.12.4 2026.4

Advisories 1

References