CVE Catalog

CVE-2026-19318

CriticalCVSS 9.3
Published: Translated: NVD NIST

Summary

A stack-based buffer overflow in the iked process of WatchGuard Fireware OS allows a remote unauthenticated attacker to execute arbitrary code by sending specially crafted network traffic.

Risk Assessment

An attacker can remotely take control of the device, potentially leading to full network compromise.

Recommendation

Apply WatchGuard patches immediately and restrict access to network services.

Original NVD description (English source)

A stack-based buffer overflow vulnerability in the WatchGuard Fireware OS iked process allows a remote unauthenticated attacker to execute arbitrary code by sending specially crafted network traffic.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS