Vulnerability · Published Jul 2, 2026 · Assigned by WatchGuard
CVE-2026-8247WatchGuard Firebox admd Out of Bounds Write Vulnerability
High 7.7
In plain English
A high-severity buffer overflow in Fireware OS from WatchGuard. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 33% of all known vulnerabilities).
Severity (CVSS 4.0)7.7High
Exploit odds (30 days)0.4%top 67.5% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
An Out-of-bounds Write vulnerability in WatchGuard Fireware OS may allow an unauthenticated attacker on the same local network segment to execute arbitrary code. This vulnerability affects Fireware OS 11.0 up to and including 11.12.4_Update1, 12.0 up to and including 12.12 and 2025.1 up to and including 2026.2.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| WatchGuard | Fireware OS | 2025.1 – before 2026.2.112.0 – before 12.12.111.0 – before * |
| WatchGuard | Fireware OS | 12.0 – before 12.11.9 |
| WatchGuard | Fireware OS | 12.0 – before 12.5.19 |
Weakness: CWE-120 · Vector: CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
References
- https://psirt.watchguard.com/CVE-2026-8247 vendor-advisory
- https://www.watchguard.com/wgrd-psirt/advisory/wgsa-2026-00026 vendor-advisory