CVE-2026-86132 – WatchGuard Fireware OS
“When the firewall itself can be turned against you, every connection it guards becomes a liability.”
This WatchGuard Fireware OS update fixes 12 vulnerabilities across the firewall's VPN, authentication, management and packet-processing services. CVE-2026-86131 has a CVSS score of 9.2, Critical severity. It lets an attacker who controls a remote VPN server run arbitrary commands as root on a connecting Firebox through the BOVPN Over TLS client configuration. CVE-2026-81433 has a CVSS score of 8.7, High severity, and lets an unauthenticated attacker on an adjacent network execute code with a crafted DHCP packet. CVE-2026-18145 has a CVSS score of 8.6, High severity, and exposes the spamBlocker service to code execution by an authenticated administrator.
CVE-2026-86134 has a CVSS score of 8.7, High severity. CVE-2026-86128, CVE-2026-86132 and CVE-2026-86133 each have a CVSS score of 8.2, High severity. Together, these four flaws let remote attackers crash the login interface, NetFlow packet processing and the IKEv2 daemon. CVE-2026-13224 has a CVSS score of 8.2, High severity, and allows arbitrary file reads through the WebUI management agent. CVE-2026-13046 has a CVSS score of 7.5, High severity, and enables code execution in the SAML session service. CVE-2026-86101 has a CVSS score of 7.2, High severity, and grants unauthorized Mobile VPN with SSL access. CVE-2026-86136 and CVE-2026-90441 each have a CVSS score of 7.1, High severity, and let low-privileged accounts crash the wgagent daemon and read files.
Key Details
- Affected Product
- Watchguard Fireware
- Attack Vector
- Network
- Attack Complexity
- Low
- Privileges Required
- None
- User Interaction
- None
- CWE Classification
- CWE-191