CVE Catalog
CVE-2026-19315
CriticalCVSS 9.3Summary
A type confusion vulnerability in the iked process of WatchGuard Fireware OS allows a remote unauthenticated attacker to execute arbitrary code by sending specially crafted network traffic.
Risk Assessment
An attacker can remotely execute arbitrary code on the device, potentially leading to full system compromise.
Recommendation
Apply WatchGuard patches immediately and monitor network traffic for suspicious activity.
Original NVD description (English source)
A type confusion vulnerability in the iked process of WatchGuard Fireware OS allows a remote unauthenticated attacker to execute arbitrary code by sending specially crafted network traffic.