CVE-2025-12026

HIGH

WatchGuard Fireware Authenticated Out-of-bounds Write via Certificate Request CLI

Title source: llm
STIX 2.1

Description

An Out-of-bounds Write vulnerability in WatchGuard Fireware OS’s certificate request command could allow an authenticated privileged user to execute arbitrary code via specially crafted CLI commands.This vulnerability affects Fireware OS 12.0 up to and including 12.11.4, 12.5 up to and including 12.5.13, and 2025.1 up to and including 2025.1.2.

References (1)

Core 1

Scores

CVSS v3 7.2
EPSS 0.0038
EPSS Percentile 29.3%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact total

Details

CWE
CWE-787
Status published
Products (1)
watchguard/fireware 2025.1 - 2025.1.3
Published Dec 04, 2025
Tracked Since Feb 18, 2026