CVEvulnerability

CVE-2026-8247

7.7 HIGH Published 2026-07-03 Modified 2026-10-25 Official page ↗
Status
Analyzed
Published
2026-07-03
Last modified
2026-10-25
Assigner
5d1c2695-1a31-4499-88ae-e847036fd7e3
CVSS 4.0 (5d1c2695-1a31-4499-88ae-e847036fd7e3)
7.7 HIGH — CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
CVSS 3.1 ([email protected])
8.8 HIGH — CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-120, CWE-787

Description

An Out-of-bounds Write vulnerability in WatchGuard Fireware OS may allow an unauthenticated attacker on the same local network segment to execute arbitrary code. This vulnerability affects Fireware OS 11.0 up to and including 11.12.4_Update1, 12.0 up to and including 12.12 and 2025.1 up to and including 2026.2.

Affected configurations

• watchguard fireware (>= 11.0.0 < 11.12.4) • watchguard fireware 11.12.4 • watchguard fireware (>= 12.5 < 12.5.19) • watchguard fireware (>= 2025.1 < 2026.2.1) • watchguard fireware (>= 12.0 < 12.12.1)

Related

Weakness · CWE (2)

  • CWE-120 Buffer Copy without Checking Size of Input weakness
  • CWE-787 Out-of-bounds Write weakness

References