CVE-2026-93866

WatchGuard Fireware OS

Prioridad media: es grave, pero no se conoce explotación

An integer overflow vulnerability in the WebSocket connection handling used by WatchGuard Fireware OS's Access Portal allows a remote, unauthenticated attacker to write beyond the bounds of a heap buffer by sending a specially crafted request while the Access Portal feature is enabled.

En las noticias

• Múltiples vulnerabilidades en Fireware OS de WatchGuard · INCIBE-CERT