CVE-2026-81433 – WatchGuard Fireware OS

This WatchGuard Fireware OS update fixes 12 vulnerabilities across the firewall's VPN, authentication, management and packet-processing services. CVE-2026-86131 has a CVSS score of 9.2, Critical severity. It lets an attacker who controls a remote VPN server run arbitrary commands as root on a connecting Firebox through the BOVPN Over TLS client configuration. CVE-2026-81433 has a CVSS score of 8.7, High severity, and lets an unauthenticated attacker on an adjacent network execute code with a crafted DHCP packet. CVE-2026-18145 has a CVSS score of 8.6, High severity, and exposes the spamBlocker service to code execution by an authenticated administrator.

CVE-2026-86134 has a CVSS score of 8.7, High severity. CVE-2026-86128, CVE-2026-86132 and CVE-2026-86133 each have a CVSS score of 8.2, High severity. Together, these four flaws let remote attackers crash the login interface, NetFlow packet processing and the IKEv2 daemon. CVE-2026-13224 has a CVSS score of 8.2, High severity, and allows arbitrary file reads through the WebUI management agent. CVE-2026-13046 has a CVSS score of 7.5, High severity, and enables code execution in the SAML session service. CVE-2026-86101 has a CVSS score of 7.2, High severity, and grants unauthorized Mobile VPN with SSL access. CVE-2026-86136 and CVE-2026-90441 each have a CVSS score of 7.1, High severity, and let low-privileged accounts crash the wgagent daemon and read files.