Skip to content
OpenAdvisories
High · 8.6 CVE-2026-90442 EUVD-2026-111153GHSA-q6qq-w5qx-fffm

Fireware OS Authenticated Stack Buffer Overflow in certd Allows Denial of Service

Published Oct 27, 2026 · Updated Nov 4, 2026 · Assigned by WatchGuard

Description

A stack-based buffer overflow vulnerability in the Fireware OS certd process allows an authenticated attacker with access to the Firebox management interface to crash the certificate management service and potentially execute arbitrary code by sending a specially crafted request.

Affected products

VendorProductAffectedFixed
WatchGuard Fireware OS 2025.1 – < 2026.4, 12.0 – < 12.12.4, 12.0 – < 12.5.22 2026.4

Advisories 1

References