PT-2026-82825

CVE-2026-19313

Published

2026-08-27

Updated

2026-09-01

Description by

CVSS 4.0

9.3

Critical

MetricsAV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Name of the Vulnerable Software and Affected Versions WatchGuard Fireware OS (affected versions not specified)

Description A heap overflow in the iked process allows a remote unauthenticated attacker to execute arbitrary code by sending specially crafted network traffic. A heap overflow occurs when a program writes more data to a heap-allocated memory block than it can hold, potentially corrupting memory and allowing for code execution.

Recommendations Update the firewall to the latest patched version.

Exploitability

Fix

Impacts

Researchers

Mccaulay

Mccaulay Hudson

Zmarak Awais

Vendors

Affected products

Weakness enumeration

CWE-680: Integer Overflow to Buffer Overflow