Description
A stack-based buffer overflow vulnerability in the spamBlocker (spamd) service of WatchGuard Fireware OS allows an authenticated attacker with administrator privileges to crash the service or potentially execute arbitrary code by sending a specially crafted management request.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| WatchGuard | Fireware OS | 2026.3 – < 2026.3.2, 2025.0 – < 2026.2.3, 12.0 – < 12.12.3, 12.0 – < 12.5.21 | 2026.3.2 |
Advisories 2
- NCSC-2026-0404 Kwetsbaarheden verholpen in WatchGuard Fireware OS NCSC-NL (Netherlands) · Oct 7, 2026
- WID-SEC-2026-3646 WatchGuard Fireware OS: Mehrere Schwachstellen BSI CERT-Bund (WID) · Sep 29, 2026
References
- https://psirt.watchguard.com/CVE-2026-18145 vendor-advisory