CVE-2026-90442

Fireware OS Authenticated Stack Buffer Overflow in certd Allows Denial of Service

At a glance

Severity: HIGH 8.6
State: PUBLISHED
Published: 2026-10-27
Updated: 2026-10-27
Assigner: WatchGuard
NVD status: Received

Description

A stack-based buffer overflow vulnerability in the Fireware OS certd process allows an authenticated attacker with access to the Firebox management interface to crash the certificate management service and potentially execute arbitrary code by sending a specially crafted request.

Scores

Version	Score	Vector	Scored by
CVSS 4.0	HIGH 8.6	CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L	WatchGuard
CVSS 4.0	HIGH 8.6	CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X	NVD · 5d1c2695-1a31-4499-88ae-e847036fd7e3 (Secondary)

Weaknesses (CWE)

European references

ENISA EUVD · EUVD-2026-111153
GCVE · GCVE-0-2026-90442

Affected products

Product	Versions
WatchGuard · Fireware OS	affected 2025.1 < 2026.4 ; affected 12.0 < 12.12.4
WatchGuard · Fireware OS	affected 12.0 < 12.5.22

References

https://psirt.watchguard.com/CVE-2026-90442

Sources

Source	Licence
CVE List (CVEProject cvelistV5)	CVE Program Terms of Use
ENISA EUVD	ENISA — reproduction authorised, source acknowledged
NVD (NIST) via fkie-cad/nvd-json-data-feeds	Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD