CVE-2026-13086

UNKNOWN 0.0

Fireware OS Stack-Based Buffer Overflow in Mobile Security epm Endpoint

CVSS Score

0.0

EPSS Score

0.0%

EPSS Percentile

0th

A stack-based buffer overflow in the epm (Endpoint Protection Manager) service used by the deprecated Mobile Security feature in WatchGuard Fireware OS allows an unauthenticated remote attacker to execute arbitrary code.

CWE	CWE-121 CWE-787 CWE-798
Vendor	watchguard
Product	fireware os
Published	Aug 27, 2026

Stay Ahead of the Next One

Get instant alerts for watchguard fireware os

Be the first to know when new unknown vulnerabilities affecting watchguard fireware os are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

Affected Versions

WatchGuard / Fireware OS

2025.0 < 2026.2.2 12.0 < 12.12.2

WatchGuard / Fireware OS

12.0 < 12.5.20

References

NVD ↗ CVE.org ↗ EPSS Data ↗

psirt.watchguard.com: https://psirt.watchguard.com/CVE-2026-13086

Credits

Mat Powell of TrendAI Zero Day Initiative