CERT24WatchGuard fixes critical Fireware OS remote code execution vulnerabilityLoading data…
CERT24Threat Observatory
Period

WatchGuard fixes critical Fireware OS remote code execution vulnerability

WatchGuard released Fireware OS security updates addressing 15 vulnerabilities, including the critical code injection vulnerability CVE-2026-86131. It could allow an attacker who controls the remote VPN server to execute arbitrary commands with root privileges on a connecting Firebox appliance. The vendor stated that it is not aware of exploitation of these vulnerabilities in the wild.

← Back to intelligence

WatchGuard fixes critical Fireware OS remote code execution vulnerability

WatchGuard released Fireware OS security updates addressing 15 vulnerabilities, including the critical code injection vulnerability CVE-2026-86131. It could allow an attacker who controls the remote VPN server to execute arbitrary commands with root privileges on a connecting Firebox appliance. The vendor stated that it is not aware of exploitation of these vulnerabilities in the wild.