CVE-2026-19318

CVE

Threat entity extracted from intelligence sources

Frequency

5

occurrences

First Seen

August 28, 2026

Last Seen

August 29, 2026

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Critical Vulnerabilities in WatchGuard Fireware OS Require Immediate Patching60.8

Multiple critical vulnerabilities have been identified in WatchGuard Fireware OS and WatchGuard Dimension, with CVSS scores of 9.3. These include CVE-2026-19318, a stack-based buffer overflow in the iked process, allowing remote unauthenticated attackers to execute arbitrary code via crafted network...

Public Exploits

Checking GitHub for proof-of-concept code…

Related Clusters (1)

Critical Vulnerabilities in WatchGuard Fireware OS Require Immediate Patching

Aug 28·5 sources

Related Articles (5)

PSIRT WatchGuard CVE-2026-19318

psirt.watchguard.com·Aug 29

Warning: Multiple Vulnerabilities in WatchGuard Fireware OS, Patch Immediately!

Ccb.Belgium.Be·Aug 28

CVE-2026-19318 - Fireware OS Pre-Authentication Stack Buffer Overflow in iked Allows Remote Code Execution Latest High/Critical Vulnerabilitiy Feed / 15h CVE ID : CVE-2026-19318 Published : Aug. 28, 2026, 2:16 a.m. 7 hours, 47 minutes ago Description : A stack-based buffer overflow vulnerability in the WatchGuard Fireware OS iked process allows a remote unauthenticated attacker to execute arbitrary code by sending specially crafted network traffic. Severity: 9.3 CRITICAL Visit the link for more

cvefeed.io·Aug 28

Critical Pre-Authentication RCE Flaws Expose WatchGuard Fireware VPNs Mallory Threat Intelligence Stories / 13h WatchGuard released fixes for five critical vulnerabilities in Fireware OS and WatchGuard Dimension, all rated CVSS v4 9.3. Three flaws in the internet-exposed `iked` IKE/VPN daemon—including the pre-authentication stack buffer overflow tracked as `CVE-2026-19318`—could allow unauthenticated attackers to execute code by sending crafted VPN traffic, creating a direct perimeter-compr

mallory.ai·Aug 28

CVE-2026-19318 - Exploits & Severity

Related Entities

DDoS CVE-2026-19313 CVE-2026-13086 CVE-2026-19315 CVE-2026-78174 CWE-120 - Classic Buffer Overflow CWE-122 - Heap-based Buffer Overflow CWE-191 - Integer Underflow CWE-200 - Exposure of Sensitive Information CWE-287 - Improper Authentication CWE-843 - Type Confusion CWE-129 - Improper Validation of Array Index