CVE-2026-90442#
Fireware OS Authenticated Stack Buffer Overflow in certd Allows Denial of Service
Summary #
A stack-based buffer overflow vulnerability in the Fireware OS certd process allows an authenticated attacker with access to the Firebox management interface to crash the certificate management service and potentially execute arbitrary code by sending a specially crafted request.
Product status #
| Product | Affected | Not affected |
|---|---|---|
| Fireware OS | ||
| Default | >= 2025.1, < 2026.4, >= 12.0, < 12.12.4 | >= 2026.4, >= 12.12.4 |
| T15/T35 | >= 12.0, < 12.5.22 | >= 12.5.22 |
Weakness Type and Impact #
Exploitation Status #
WatchGuard is not aware of any exploitation of this vulnerability in the wild.
Solution #
Fireware OS 2026.4, Fireware OS 12.12.4, Fireware OS 12.5.22
References #
Credits #
- Cody Sixteen finder