CVE-2026-19313Patch

LOWCVSS 9.3 · CRITICAL

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Patch affected systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

An heap overflow vulnerability in the WatchGuard Fireware OS iked process allows a remote unauthenticated attacker to execute arbitrary code by sending specially crafted network traffic.

0.5/ 10 priority

Sources & remediation

Weakness type (CWE)
CWE-122CWE-190CWE-680

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Threat summary

  • Patch or workaround signal is available
  • 4 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Patch or workaround mentioned in 3 signals
  • Technical details provided in 3 signals
  • Disclosure: 1 classified signal
  • Peaked 1d ago at 3 mentions (2026-08-28); latest day: 1
  • 4 total mentions across 2 days

Deep dive

Activity timeline4 mentions / 2d
01223Mentions · 2026-08-28: 3Mentions · 2026-09-01: 1Patch / Workaround · 2026-08-28: 2Patch / Workaround · 2026-09-01: 1Technical Details · 2026-08-28: 2Technical Details · 2026-09-01: 108-2809-01
Signal classification2 categories
Patch
375.0%
Disclosure
125.0%
Referenced assets4 URLs
Classification over time
DateTotalLabels
2026-08-283
Disclosure1Patch2
2026-09-011
Patch1
Full discourse4 posts
  • Daily CyberSecurity@Daily_CyberSec
    Patch

    WatchGuard patched CVE-2026-19313 and more Fireware flaws, pre-authentication remote code execution bugs rated CVSS 9.3. Update firewalls now. #WatchGuard #Fireware #RCE #Firewall #InfoSec https://securityonline.info/watchguard-fireware-rce/

    Post summary

    WatchGuard has patched CVE-2026-19313, a pre-auth RCE flaw rated CVSS 9.3, and users are urged to update their firewalls immediately.

    04065849
    13.0K followersView on X
  • NCIIPC India@NCIIPC
    Disclosure

    Multiple #Critical vulnerabilities have been discovered in #WatchGuard Dimension and Fireware OS #CVE-2026-78174 #CVE-2026-19315 #CVE-2026-13086 #CVE-2026-19318 #CVE-2026-19313 https://psirt.watchguard.com/?sev=critical

    Post summary

    A tweet announces several newly discovered critical CVEs affecting WatchGuard Dimension and Fireware OS, providing only their identifiers and a PSIRT link without additional technical or exploit details.

    000211.1K
    8.5K followersView on X
  • CCB Alert@CCBalert
    Patch

    Warning: Multiple vulnerabilities in #WatchGuard Fireware OS and #Dimension. #CVE-2026-19313 #CVE-2026-19318 #CVE-2026-13086 #CVE-2026-19315 #CVE-2026-78174 CVSS: 9.3 can lead to a full system compromise #RCE! Read our advisory: https://ccb.belgium.be/advisories/warning-multiple-vulnerabilities-watchguard-fireware-os-patch-immediately and #Patch #Patch #Patch

    Post summary

    Several high‑severity RCE CVEs in WatchGuard Fireware OS and Dimension are disclosed; users are urged to apply the available patches immediately.

    02000321
    7.2K followersView on X
  • RichTechGuy@richtechguy
    Patch

    WatchGuard patches critical unauth RCE in Fireware iked (IKE/IPsec): CVE-2026-19313/19315/19318 (+ more). CVSS 9.3. No known exploitation yet—still prioritize edge Firebox upgrades to 2026.2.2 / 12.12.2 / 12.5.20. https://www.securityweek.com/watchguard-patches-critical-vulnerabilities/

    Post summary

    WatchGuard has released patches for a high‑score unauthenticated RCE affecting its Fireware iked module; no active exploitation reported, but firmware upgrades are strongly recommended.

    0000094
    356 followersView on X

Explore more