WatchGuard security advisories, October 2026

Every WatchGuard security advisory published in October 2026, from WatchGuard PSIRT Advisories via NVD, with its severity, CVEs and CISA KEV status. Open a record for affected and fixed versions and the vendor's own link.

Advisories: 21
Critical: 8
High: 8
In CISA KEV: 0
CVEs: 21

WatchGuard advisories published in October 2026

Oct 27, 2026
Critical [CVE-2026-112709] Fireware OS Heap Buffer Overflow in AD Authentication Service Allows Pre-Authentication Remote Code Execution
Critical9.2
Oct 27, 2026
Critical [CVE-2026-103593] Fireware OS Stack Buffer Overflow in Logging Service Allows Remote Code Execution
Critical9.1
Oct 27, 2026
Critical [CVE-2026-112710] Fireware OS Heap Buffer Overflow in AD Authentication Service Allows Pre-Authentication Remote Code Execution
Critical9.2
Oct 27, 2026
Critical [CVE-2026-93857] Fireware OS Pre-Authentication Stack Buffer Overflow in SIP Proxy Allows Remote Code Execution
Critical9.2
Oct 27, 2026
Critical [CVE-2026-93866] integer overflow vulnerability in the WebSocket connection handling used by WatchGuard Fireware OS's Access Portal allows a remote, unauthenticated attacker to write beyond the bounds of a heap buffer by sending a specially crafted request while the Access Portal feature is enabled
Critical9.2
Oct 27, 2026
Critical [CVE-2026-103594] stack-based buffer overflow vulnerability in Fireware OS's WireGuard configuration processing allows a remote attacker that has man-in-the-middle TLS-decrypted access between the Firebox and WatchGuard Cloud to create a Denial of Service condition and potentially execute arbitrary code by tampering with a FireCloud Gateway configuration payload
Critical9.5
Oct 27, 2026
Critical [CVE-2026-93865] Fireware OS Missing Authentication in FireCluster Sync Daemon Allows Remote Root Action Injection
Critical9.2
Oct 27, 2026
High [CVE-2026-90465] Fireware OS Missing Authentication in FireCluster Sync Allows Privilege Escalation
High8.7
Oct 27, 2026
High [CVE-2026-93862] Fireware OS Out-of-Bounds Read in FireCluster Sync Allows Denial of Service
High7.2
Oct 27, 2026
High [CVE-2026-90464] external control of file path vulnerability in a WatchGuard Fireware OS firewall diagnostic command allows a remote, authenticated attacker with at least read-only (Device Monitor) privileges and access to the management CLI to create, truncate, or overwrite arbitrary files and modify kernel parameters with root privileges by submitting a specially crafted command
High7.2
Oct 27, 2026
High [CVE-2026-93434] XPath injection vulnerability in WatchGuard Fireware OS's SSH authentication process allows a remote, unauthenticated attacker with access to the management SSH interface to extract sensitive configuration data by submitting a specially crafted request
High8.7
Oct 27, 2026
High [CVE-2026-90442] Fireware OS Authenticated Stack Buffer Overflow in certd Allows Denial of Service
High8.6
Oct 27, 2026
High [CVE-2026-93864] link following vulnerability in WatchGuard Fireware OS’s firewall daemon allows a local attacker with code execution as a low-privileged system process to overwrite arbitrary files with root privileges, and to tamper with firewall IP set data, by planting a crafted file system object and triggering a list update
High7.1
Oct 27, 2026
High [CVE-2026-111107] NULL pointer dereference vulnerability in WatchGuard Fireware OS’s management interface allows a remote, unauthenticated attacker with network access to the management interface to crash the management service by sending a specially crafted login request
High8.7
Oct 27, 2026
Medium [CVE-2026-115495] Cleartext Transmission of Sensitive Information vulnerability in the WatchGuard Mobile VPN with SSL client for Windows allows a local attacker who can capture loopback traffic to obtain the user’s VPN username and password
Medium5.7
Oct 27, 2026
Medium [CVE-2026-113881] Fireware OS Stack Buffer Overflow in VPN Network Access Enforcement Allows Unprivileged Code Execution
Medium6.1
Oct 27, 2026
Medium [CVE-2026-82332] improper authentication vulnerability in WatchGuard Fireware OS's AuthPoint multi-factor authentication process allows a local, unauthenticated attacker on the appliance to hijack another user's in-progress MFA session by supplying a specially crafted request and convincing the victim user to accept an MFA push notification
Medium5.7
Oct 27, 2026
Medium [CVE-2026-104381] Fireware OS Missing Authentication in FireCluster State Sync Allows BOVPN Tunnel Denial of Service
Medium6.0
Oct 22, 2026
High [CVE-2026-115253] incorrect permission assignment vulnerability in the WatchGuard Agent's log directory allows a local, authenticated non-administrative user to create, modify, append to, or delete the agent's log files and write other files into the directory
High7.3
Oct 22, 2026
Medium [CVE-2026-96293] cleartext storage of sensitive information vulnerability in WatchGuard Endpoint Security's Full Disk Encryption feature for macOS allows a local, unprivileged user or process to obtain a managed computer's FileVault Personal Recovery Key by reading a persistently written diagnostic log file left readable by all local users
Medium6.9
Oct 1, 2026
Critical [CVE-2026-13043] missing authentication vulnerability in the Kernel Memory Access Driver (PSKMAD) used by WatchGuard endpoint security products allows a local, authenticated attacker to bypass the driver's access-control handshake and issue arbitrary privileged commands to the driver, resulting in disclosure of kernel and process memory
Critical9.3

Get an email when WatchGuard publishes the next one.

See WatchGuard's last 90 days of advisories first. Then choose one product with live alerts free for life, or a free month of real-time alerts on everything with the severity, the fixed version and the vendor's link (card needed, then US$15/month; we email you before the first charge).

Alert me about WatchGuard

Dates are each advisory's publication date at the source, in UTC; a record with no source date is filed under the day VulniPulse first saw it.