8.8

CVE-2026-8247

WatchGuard Firebox admd Out of Bounds Write Vulnerability

An Out-of-bounds Write vulnerability in WatchGuard Fireware OS may allow an unauthenticated attacker on the same local network segment to execute arbitrary code.




This vulnerability affects Fireware OS 11.0 up to and including 11.12.4_Update1, 12.0 up to and including 12.12 and 2025.1 up to and including 2026.2.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
WatchguardFireware Version >= 11.0.0 < 11.12.4
WatchguardFireware Version11.12.4 Update-
WatchguardFireware Version11.12.4 Updateu1
WatchguardFireware Version >= 12.5 < 12.5.19
   WatchguardFirebox T15 Version-
   WatchguardFirebox T35 Version-
WatchguardFireware Version >= 2025.1 < 2026.2.1
   WatchguardFirebox M295 Version-
   WatchguardFirebox M395 Version-
   WatchguardFirebox M495 Version-
   WatchguardFirebox M595 Version-
   WatchguardFirebox M695 Version-
   WatchguardFirebox T115-w Version-
   WatchguardFirebox T125 Version-
   WatchguardFirebox T125-w Version-
   WatchguardFirebox T145 Version-
   WatchguardFirebox T145-w Version-
   WatchguardFirebox T185 Version-
WatchguardFireware Version >= 12.0 < 12.12.1
   WatchguardFirebox Cloud Version-
   WatchguardFirebox M270 Version-
   WatchguardFirebox M290 Version-
   WatchguardFirebox M370 Version-
   WatchguardFirebox M390 Version-
   WatchguardFirebox M440 Version-
   WatchguardFirebox M4600 Version-
   WatchguardFirebox M470 Version-
   WatchguardFirebox M4800 Version-
   WatchguardFirebox M5600 Version-
   WatchguardFirebox M570 Version-
   WatchguardFirebox M5800 Version-
   WatchguardFirebox M590 Version-
   WatchguardFirebox M670 Version-
   WatchguardFirebox M690 Version-
   WatchguardFirebox Nv5 Version-
   WatchguardFirebox T20 Version-
   WatchguardFirebox T25 Version-
   WatchguardFirebox T40 Version-
   WatchguardFirebox T45 Version-
   WatchguardFirebox T55 Version-
   WatchguardFirebox T70 Version-
   WatchguardFirebox T80 Version-
   WatchguardFirebox T85 Version-
   WatchguardFireboxv Version-
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.27% 0.189
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 8.8 2.8 5.9
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
5d1c2695-1a31-4499-88ae-e847036fd7e3 7.7 0 0
CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer.

CWE-787 Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

https://www.watchguard.com/wgrd-psirt/advisory/wgsa-2026-00026
Vendor Advisory
https://psirt.watchguard.com/CVE-2026-8247
Broken Link