Advisoriesby IbisWatchGuard TechnologiesCVE-2026-78011
WatchGuard Technologies Fireware OS: integer overflow
Fix: upgrade to 2026.2.2 or later (4 fixed versions below)
An integer underflow vulnerability in the WatchGuard Fireware OS iked process allows a remote unauthenticated attacker to create a Denial of Service (DoS) condition in VPN processing by sending specially crafted network traffic.
Affected versions
| Package | Affected | Fixed in |
|---|---|---|
| Fireware OS Product | >= 2025.0, < 2026.2.2 | 2026.2.2 |
| >= 12.0, < 12.12.2 | 12.12.2 | |
| >= 2026.3, < 2026.3.1 | 2026.3.1 | |
| >= 12.0, < 12.5.20 | 12.5.20 |