Signal is active with 4 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A stack-based buffer overflow vulnerability in Fireware OS's WireGuard configuration processing allows a remote attacker that has man-in-the-middle TLS-decrypted access between the Firebox and WatchGuard Cloud to create a Denial of Service condition and potentially execute arbitrary code by tampering with a FireCloud Gateway configuration payload.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
CVE-2026-103594 and others: Multiple vulnerabilities in WatchGuard Fireware OS, up to 9.5 rating 🔥 WatchGuard disclosed seventeen vulnerabilities in Fireware OS. The most severe flaws allow unauthenticated attackers to cause a DoS condition and potentially execute arbitrary code or invoke privileged system-level administrative actions. 👉 https://nt.ls/g5Xka
🚨 2 critical RCE bugs in WatchGuard Fireware OS ⚠️ CVE-2026-112709 (9.2): pre-auth, AD auth ⚠️ CVE-2026-103594 (9.5): FireCloud Gateway WireGuard 📊 CVSS 4.0, CNA ✅ Fix: 2026.4 / 12.12.4 / 12.5.22 🛡️ Not known exploited 🔗 https://psirt.watchguard.com/CVE-2026-112709 #CyberSecurity #Firewall https://t.co/m2K0iJi4BL
WatchGuard fixes 18 Fireware OS vulnerabilities on the Firebox firewall, including critical CVE-2026-103594 (CVSS 9.5). Upgrade to 2026.4 now. #WatchGuard #Fireware #Firebox #Firewall #CVE2026103594 #CVE202693865 #PatchNow #NetworkSecurity https://securityonline.info/watchguard-fireware-os-vulnerabilities-2/
WatchGuard Fireware OS: 18 advisories, 7 critical (CVSS 9.1–9.5), including pre-auth remote code execution in the AD authentication service (CVE-2026-112709, CVE-2026-112710), the SIP proxy (CVE-2026-93857) and WireGuard setup (CVE-2026-103594). https://vulnipulse.com/vendors/watchguard