CVE-2026-8247
HIGHWatchGuard Firebox admd Out of Bounds Write Vulnerability
Title source: cnaDescription
An Out-of-bounds Write vulnerability in WatchGuard Fireware OS may allow an unauthenticated attacker on the same local network segment to execute arbitrary code. This vulnerability affects Fireware OS 11.0 up to and including 11.12.4_Update1, 12.0 up to and including 12.12 and 2025.1 up to and including 2026.2.
References (1)
Core 1
Core References
Vendor Advisory vendor-advisory
https://www.watchguard.com/wgrd-psirt/advisory/wgsa-2026-00026
Scores
CVSS v4
7.7
EPSS
0.0020
EPSS Percentile
10.2%
CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
CISA SSVC
Vulnrichment
Exploitation
none
Automatable
no
Technical Impact
total
Details
CWE
CWE-120
Status
published
Products (4)
WatchGuard/Fireware OS
11.0 - 11.12.4+541730
WatchGuard/Fireware OS
12.0 - 12.12
WatchGuard/Fireware OS
12.5 - 12.5.18
WatchGuard/Fireware OS
2025.1 - 2026.2
Published
Jul 03, 2026
Tracked Since
Jul 03, 2026