Advisoriesby IbisWatchGuard TechnologiesCVE-2026-19318
WatchGuard Technologies Fireware OS: stack buffer overflow
Fix: upgrade to 2026.2.2 or later (4 fixed versions below)
A stack-based buffer overflow vulnerability in the WatchGuard Fireware OS iked process allows a remote unauthenticated attacker to execute arbitrary code by sending specially crafted network traffic.
Affected versions
| Package | Affected | Fixed in |
|---|---|---|
| Fireware OS Product | >= 2025.0, < 2026.2.2 | 2026.2.2 |
| >= 12.0, < 12.12.2 | 12.12.2 | |
| >= 12.0, < 12.5.20 | 12.5.20 | |
| >= 2026.3, < 2026.3.1 | 2026.3.1 |