CVE-2026-81851
MediumCVSS 6.9Exploitation Probability (EPSS)
Low risk16th percentile - higher than 16% of all known CVEs
Summary
A heap-based buffer overflow vulnerability in Fireware OS's iked process allows an authenticated administrator to crash the IKE daemon (iked), resulting in a denial of service, by saving a specially crafted configuration.
Risk Assessment
The attack can cause disruption of IKE services, potentially affecting VPN communications and network availability.
Recommendation
It is recommended to update Fireware OS to a version that includes a fix for this vulnerability, and to restrict administrator privileges to the minimum necessary.
Other vulnerabilities in Fireware OS
See all- CVE-2026-3343Medium
A reflected cross-site scripting (XSS) vulnerability in the Fireware OS Web UI enabled execution of malicious JavaScript in the context of an authenticated management user's browser when they click on a specially crafted link.
- CVE-2025-13939Medium
A stored XSS vulnerability in the Gateway Wireless Controller module of WatchGuard Fireware OS allows injection of malicious scripts that execute in the administrator's browser.
Original NVD description (English source)
A heap-based buffer overflow vulnerability in Fireware OS's iked process allows an authenticated administrator to crash the IKE daemon (iked), resulting in a denial of service, by saving a specially crafted configuration.