CVE Catalog

CVE-2026-19313

CriticalCVSS 9.3
Published: Translated: NVD NIST

Summary

A heap overflow vulnerability in the iked process of WatchGuard Fireware OS allows a remote unauthenticated attacker to execute arbitrary code by sending specially crafted network traffic.

Risk Assessment

An attacker can remotely take control of the device, potentially leading to data confidentiality and integrity breaches.

Recommendation

Apply WatchGuard patches immediately and deploy intrusion detection systems.

Original NVD description (English source)

An heap overflow vulnerability in the WatchGuard Fireware OS iked process allows a remote unauthenticated attacker to execute arbitrary code by sending specially crafted network traffic.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS