CVE-2026-93866
WatchGuard Fireware OS
Medium priority: severe, but no known exploitation
An integer overflow vulnerability in the WebSocket connection handling used by WatchGuard Fireware OS's Access Portal allows a remote, unauthenticated attacker to write beyond the bounds of a heap buffer by sending a specially crafted request while the Access Portal feature is enabled.
In the news
- Múltiples vulnerabilidades en Fireware OS de WatchGuard · INCIBE-CERT