CVE-2026-86133

Name of the Vulnerable Software and Affected Versions WatchGuard Fireware OS (affected versions not specified)

Description An integer underflow in the IKE daemon (iked) allows a remote attacker to cause a denial of service. After completing the initial IKEv2 handshake, the attacker can crash the iked process by sending a specially crafted encrypted IKEv2 message. An integer underflow occurs when an arithmetic operation results in a value smaller than the minimum value the variable can hold, often leading to unexpected behavior or system crashes.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.