CVE Catalog
CVE-2026-13086
CriticalCVSS 9.3Summary
A stack-based buffer overflow in the epm (Endpoint Protection Manager) service used by the deprecated Mobile Security feature in WatchGuard Fireware OS allows an unauthenticated remote attacker to execute arbitrary code.
Risk Assessment
An attacker can remotely execute arbitrary code on the device, potentially leading to full system compromise.
Recommendation
Disable the deprecated Mobile Security feature and apply available WatchGuard patches.
Original NVD description (English source)
A stack-based buffer overflow in the epm (Endpoint Protection Manager) service used by the deprecated Mobile Security feature in WatchGuard Fireware OS allows an unauthenticated remote attacker to execute arbitrary code.