Veille CVE

Jeudi 8 octobre 2026

5 CVE

Critique 0 Élevée 2 Moyenne 3 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « Watchguard fireware » ✕
  1. CVE-2026-13046 7.2 Élevée

    WatchGuard Fireware OS · Watchguard fireware

    A deserialization of untrusted data vulnerability in WatchGuard Fireware OS's SAML single sign-on session handling (samld) allows an attacker who has already obtained the ability to write files on the appliance to execute arbitrary code in the context of the samld service by causing samld to load a maliciously crafted session file.

  2. CVE-2026-13224 4.9 Moyenne

    WatchGuard Fireware OS · Watchguard fireware

    A path traversal vulnerability in the Fireware OS WebUI management agent allows an authenticated administrator to read or list arbitrary files on the local filesystem by sending a specially crafted management request.

  3. CVE-2026-18105 6.5 Moyenne

    WatchGuard Fireware OS · Watchguard fireware

    An uncontrolled resource consumption vulnerability in Fireware OS's diagnostic tasks feature allows a low-privileged, authenticated user to cause a denial of service of the system's diagnostic tools by repeatedly starting and aborting a specially crafted diagnostic task through the web UI.

  4. CVE-2026-18145 7.2 Élevée

    WatchGuard Fireware OS · Watchguard fireware

    A stack-based buffer overflow vulnerability in the spamBlocker (spamd) service of WatchGuard Fireware OS allows an authenticated attacker with administrator privileges to crash the service or potentially execute arbitrary code by sending a specially crafted management request.

  5. CVE-2026-86101 6.5 Moyenne

    WatchGuard Fireware OS · Watchguard fireware

    An improper authorization vulnerability in WatchGuard Fireware OS's SAML login process allows a remote, authenticated SAML user with access only to the Access Portal to obtain unauthorized Mobile VPN with SSL access through a specially crafted request.