CVE-2026-112710

Psirt.Watchguard • October 27, 2026

A heap-based buffer overflow vulnerability exists in the Fireware OS authentication service allows an attacker who controls or intercepts traffic to the configured Active Directory server to create a denial of service condition and potentially execute arbitrary code by returning a specially crafted response.

Required Configuration for Exposure #

This vulnerability affects Firebox deployments configured with an Active Directory authentication server.

Weakness Type and Impact #

CWE CWE-122 Heap-based Buffer Overflow

CWE CWE-131 Incorrect Calculation of Buffer Size

CAPEC CAPEC-100 Overflow Buffers

Exploitation Status #

WatchGuard AI Security Research finder

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Buffer Overflow Vulnerabilities in WatchGuard Fireware OS Multiple vulnerabilities have been identified in WatchGuard Fireware OS, including CVE-2026-112710, a heap-based buffer overflow in the authentication service, which allows attackers to create denial of service conditions and potentially execute arbitrary code. CVE-2026-93857 and CVE-2026-103593 are stack-based buffer overflow vulnerabilities that can be exploited by remote, unauthenticated attackers to execute arbitrary code. Affected systems include Firebox deployments configured with Active Directory authentication, SIP proxy, and external log servers in FIPS mode. WatchGuard has confirmed the existence of these vulnerabilities, with CVE-2026-112710 rated as with a CVSS score of 9.2. Patches are expected to be released shortly, and administrators are urged to monitor for updates. 1 sources 69

Extracted Entities

CVE-2026-112710

The full story

Extracted Entities

Attack Types (1)

Companies (1)

CVEs (1)

CWE Weaknesses (2)

Platforms (2)