VulnSocial

CVE-2026-8247Disclosure(watchguard / firebox_cloud)

LOWCVSS 8.8 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Patch watchguard firebox_cloud systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

An Out-of-bounds Write vulnerability in WatchGuard Fireware OS may allow an unauthenticated attacker on the same local network segment to execute arbitrary code. This vulnerability affects Fireware OS 11.0 up to and including 11.12.4_Update1, 12.0 up to and including 12.12 and 2025.1 up to and including 2026.2.

watchguard CVEsBack to dashboard
1.0/ 10 priority

Sources & remediation

Vendor / third-party advisories
Other references
Weakness type (CWE)
CWE-120CWE-787

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • firebox_cloud
  • firebox_m270
  • firebox_m290
  • firebox_m295

Threat summary

  • Patch or workaround signal is available
  • 3 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Patch or workaround mentioned in 1 signal
  • Technical details provided in 3 signals
  • Disclosure: 2 classified signals
  • Peaked 1d ago at 2 mentions (2026-07-03); latest day: 1
  • 3 total mentions across 2 days

Affected systems

Vendors
watchguard
Products
firebox_cloudfirebox_m270firebox_m290firebox_m295firebox_m370firebox_m390firebox_m395firebox_m440firebox_m4600firebox_m470

2 versions affected across 39 products

Deep dive

Activity timeline3 mentions / 2d
01122Mentions · 2026-07-03: 2Mentions · 2026-07-20: 1Patch / Workaround · 2026-07-20: 1Technical Details · 2026-07-03: 2Technical Details · 2026-07-20: 107-0307-20
Signal classification2 categories
Disclosure
266.7%
Patch
133.3%
Referenced assets3 URLs
Classification over time
DateTotalLabels
2026-07-032
Disclosure2
2026-07-201
Patch1
Full discourse3 posts
  • SecEngCyGy@snypet86
    Patch

    WatchGuard Fireware: unauth root RCE from the local segment (CVE-2026-8247). admd stack overflow on Terminal Service agent login notifications. No auth. CVSS 4.0 7.7. Patch Firebox: 12.12.1 | 12.5.19 | 2026.2.1 https://www.watchguard.com/wgrd-psirt/advisory/wgsa-2026-00026

    Post summary

    The advisory discloses an unauthenticated root RCE vulnerability (CVE-2026-8247) in WatchGuard Fireware, provides CVSS score 7.7, and lists specific patch versions along with a vendor advisory link.

    0000049
    19 followersView on X
  • Infoflowcloud@infoflowcloud
    Disclosure

    🚨*CVE* CVE-2026-8247 An Out-of-bounds Write vulnerability in WatchGuard Fireware OS may allow an unauthenticated attacker on the same local network segment to execute arbitrary code. Th… https://www.cve.org/CVERecord?id=CVE-2026-8247 ----- Traducción: CVE-2026-8247 Un fal… http://infoflow.cloud`

    Post summary

    The post announces CVE-2026-8247, an out‑of‑bounds write in WatchGuard Fireware OS that could enable local attackers to run arbitrary code, but contains no PoC, exploit code, patch info, or active exploitation evidence.

    0000047
    91 followersView on X
  • CVE@CVEnew
    Disclosure

    CVE-2026-8247 An Out-of-bounds Write vulnerability in WatchGuard Fireware OS may allow an unauthenticated attacker on the same local network segment to execute arbitrary code. Th… https://www.cve.org/CVERecord?id=CVE-2026-8247

    Post summary

    This post announces CVE-2026-8247 as an Out‑of‑bounds Write flaw in WatchGuard Fireware OS that could allow unauthenticated local attackers to execute arbitrary code.

    00000690
    57.7K followersView on X
CPE platform detail41 entries

41 of 41 entries

PartVendorProductVersionTarget SWTarget HW
Appwatchguardfirebox_cloud---
HWwatchguardfirebox_m270---
HWwatchguardfirebox_m290---
HWwatchguardfirebox_m295---
HWwatchguardfirebox_m370---
HWwatchguardfirebox_m390---
HWwatchguardfirebox_m395---
HWwatchguardfirebox_m440---
HWwatchguardfirebox_m4600---
HWwatchguardfirebox_m470---
HWwatchguardfirebox_m4800---
HWwatchguardfirebox_m495---
HWwatchguardfirebox_m5600---
HWwatchguardfirebox_m570---
HWwatchguardfirebox_m5800---
HWwatchguardfirebox_m590---
HWwatchguardfirebox_m595---
HWwatchguardfirebox_m670---
HWwatchguardfirebox_m690---
HWwatchguardfirebox_m695---
HWwatchguardfirebox_nv5---
HWwatchguardfirebox_t115-w---
HWwatchguardfirebox_t125---
HWwatchguardfirebox_t125-w---
HWwatchguardfirebox_t145---
HWwatchguardfirebox_t145-w---
HWwatchguardfirebox_t15---
HWwatchguardfirebox_t185---
HWwatchguardfirebox_t20---
HWwatchguardfirebox_t25---
HWwatchguardfirebox_t35---
HWwatchguardfirebox_t40---
HWwatchguardfirebox_t45---
HWwatchguardfirebox_t55---
HWwatchguardfirebox_t70---
HWwatchguardfirebox_t80---
HWwatchguardfirebox_t85---
HWwatchguardfireboxv---
OSwatchguardfireware---
OSwatchguardfireware11.12.4--
OSwatchguardfireware11.12.4--

Explore more

Back to dashboardwatchguard CVEsfirebox_cloud vulnerabilities