AI and data stack advisories

Severe, 6 weeks977Projects326

977 severe, 6 weeks · 326 projects

WatchGuard TechnologiesCVE-2026-90442

WatchGuard Technologies Fireware OS: stack buffer overflow

WatchGuard Technologies

CVE-2026-90442 · Published Oct 27, 2026 · updated Oct 28, 2026

High8.6
Fix: upgrade to 2026.4 or later (3 fixed versions below)
WatchGuard Technologies advisory

A stack-based buffer overflow vulnerability in the Fireware OS certd process allows an authenticated attacker with access to the Firebox management interface to crash the certificate management service and potentially execute arbitrary code by sending a specially crafted request.

Affected versions

PackageAffectedFixed in
Fireware OS
Product
>= 2025.1, < 2026.42026.4
>= 12.0, < 12.12.412.12.4
>= 12.0, < 12.5.2212.5.22
Details and references
CVSS 4.0
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Severity from
the vendor (its own CVE record or advisory)
Weakness
CWE-121, CWE-787

More WatchGuard Technologies advisories

All WatchGuard Technologies
Critical 9.2Oct 27WatchGuard Technologies Fireware OS: integer overflowCVE-2026-93866fixed in 2026.4 +2High 8.7Oct 27WatchGuard Technologies Fireware OS: XPath injectionCVE-2026-93434fixed in 12.5.22 +2Critical 9.2Oct 27WatchGuard Technologies Fireware OS: stack buffer overflowCVE-2026-93857fixed in 2026.4 +2High 7.2Oct 27WatchGuard Technologies Fireware OS: out-of-bounds readCVE-2026-93862fixed in 2026.4 +2High 7.1Oct 27WatchGuard Technologies Fireware OS: code executionCVE-2026-93864fixed in 2026.4 +2Critical 9.2Oct 27WatchGuard Technologies Fireware OS: missing authenticationCVE-2026-93865fixed in 2026.4 +2