๐Ÿ” CVE Alert

CVE-2026-18145

UNKNOWN 0.0

Fireware OS Stack-based Buffer Overflow in spamd Allows Remote Code Execution

CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th

A stack-based buffer overflow vulnerability in the spamBlocker (spamd) service of WatchGuard Fireware OS allows an authenticated attacker with administrator privileges to crash the service or potentially execute arbitrary code by sending a specially crafted management request.

CWE CWE-121
Vendor watchguard
Product fireware os
Published Sep 29, 2026
Stay Ahead of the Next One

Get instant alerts for watchguard fireware os

Be the first to know when new unknown vulnerabilities affecting watchguard fireware os are published โ€” delivered to Slack, Telegram or Discord.

Get Free Alerts โ†’ Free ยท No credit card ยท 60 sec setup

Affected Versions

WatchGuard / Fireware OS
2026.3 < 2026.3.2 2025.0 < 2026.2.3 12.0 < 12.12.3
WatchGuard / Fireware OS
12.0 < 12.5.21

References

NVD โ†— CVE.org โ†— EPSS Data โ†—
psirt.watchguard.com: https://psirt.watchguard.com/CVE-2026-18145

Credits

Nicholas Zubrisky (@NZubrisky) of TrendAI Research