Description
A stack-based buffer overflow vulnerability in the Fireware OS certd process allows an authenticated attacker with access to the Firebox management interface to crash the certificate management service and potentially execute arbitrary code by sending a specially crafted request.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| WatchGuard | Fireware OS | 2025.1 – < 2026.4, 12.0 – < 12.12.4, 12.0 – < 12.5.22 | 2026.4 |
Advisories 1
- WID-SEC-2026-4209 WatchGuard Fireware OS: Mehrere Schwachstellen BSI CERT-Bund (WID) · Oct 27, 2026
References
- https://psirt.watchguard.com/CVE-2026-90442 vendor-advisory