Skip to main content

WatchGuard Fireware OS EUVDEUVD-2026-89492

| CVE-2026-86105 MEDIUM
Improper Handling of Unicode Encoding (CWE-176)
2026-09-29 WatchGuard GHSA-6588-r8h7-2mc8
Information Disclosure Fireware Os Watchguard Firmware
6.0
CVSS 4.0 · Vendor: WatchGuard
Share

Severity by source

Vendor (WatchGuard) PRIMARY
6.0 MEDIUM
CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
vuln.today AI
7.1 HIGH

Network-reachable portal with valid low-priv credentials (PR:L) and low complexity yields unauthorized read of other apps (C:H), minor integrity (I:L), no availability; scope unchanged.

3.1 AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N
4.0 AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N

Primary rating from Vendor (WatchGuard).

CVSS VectorVendor: WatchGuard

Attack Vector
Network
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
X

Lifecycle Timeline

4
Patch available
Sep 30, 2026 - 02:01 EUVD
Metadata Corrected
Sep 30, 2026 - 00:40 vuln.today
tag: Firmware added
CVSS changed
Sep 30, 2026 - 00:22 NVD
5.3 (MEDIUM) 6.0 (MEDIUM)
Analysis Generated
Sep 29, 2026 - 23:55 vuln.today

DescriptionCVE.org

An improper authorization vulnerability in Fireware OS's Access Portal reverse proxy allows an authenticated, low-privileged Access Portal user to access other web applications they are not authorized for by sending a specially crafted request for a different resource which they are authorized to access.

AnalysisAI

Authorization bypass in the WatchGuard Fireware OS Access Portal reverse proxy lets an authenticated, low-privileged portal user reach back-end web applications they are not entitled to by sending a specially crafted request for a resource they are authorized to access. Exploitation requires valid Access Portal credentials, the SSL clientless portal to be enabled and reachable, and a specific crafted-request condition (CVSS 4.0 AT:P), so this is a genuine but bounded access-control flaw rather than a pre-auth compromise path. …

Unlock full vulnerability intelligence

  • Risk assessment & exploitation conditions
  • Attack chain visualization
  • Remediation with exact patch versions
  • Threat intelligence from 22 sources
  • Personal watchlist & email alerts
Continue with Google Continue with GitHub

No credit card · 7-day full trial

Attack ChainAIDerived

Hypothetical attack flow derived from CVE metadata

Access
technique details hidden
Exploit
technique details hidden
Execution
technique details hidden
Impact
technique details hidden
Sign in to reveal

Vulnerability AssessmentAI

Exploitation Requires an authenticated, low-privileged account on the WatchGuard Fireware OS Access Portal (the SSL/clientless reverse-proxy portal must be enabled and reachable). … Additional conditions and limiting factors are described in the full assessment.
Risk Assessment This is a genuine but bounded access-control flaw, not a critical-but-inflated finding. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in.
Exploit Scenario Full exploit scenario with step-by-step reproduction available after sign-in.
Remediation There is no exact fix version in the available data - no vendor-released patch version is identified at time of analysis - so the WatchGuard PSIRT advisory at https://psirt.watchguard.com/CVE-2026-86105 must be treated as the authoritative source for the patched Fireware OS release, and upgrading to that release is the primary fix. … Detailed patch versions, workarounds, and compensating controls in full report.
Sign in to read full assessment

Threat intelligence, references, and detailed analysis are available after sign-in.

More in Fireware Os

View all
CVE-2026-19313 CRITICAL
9.3 Aug 27

Remote code execution in WatchGuard Fireware OS is possible via a heap overflow (CWE-122) in the iked (IKE/IPsec key man
CVE-2026-19318 CRITICAL
9.3 Aug 27

Remote code execution in WatchGuard Fireware OS affects the iked (IKE/IPsec VPN key-exchange) daemon, where a stack-base
CVE-2026-19315 CRITICAL
9.3 Aug 27

Remote code execution in WatchGuard Fireware OS affects the iked IKE/IPsec VPN daemon, where a memory-safety defect lets
CVE-2026-13086 CRITICAL
9.3 Aug 27

Remote code execution in WatchGuard Fireware OS affects the epm (Endpoint Protection Manager) service tied to the deprec
CVE-2026-13368 CRITICAL
9.2 Jul 02

Remote code execution in WatchGuard Fireware OS affects Fireboxes running a Mobile User VPN with IKEv2 that authenticate
CVE-2026-86131 CRITICAL
9.2 Sep 29

Command injection as root in WatchGuard Fireware OS occurs through the BOVPN Over TLS client configuration handling, all
CVE-2026-13084 HIGH
8.7 Jul 02

Denial-of-service in WatchGuard Fireware OS lets a remote, unauthenticated attacker crash the IKEv2 VPN service by sendi
CVE-2026-86134 HIGH
8.7 Sep 30

Remote, unauthenticated requests to the WatchGuard Fireware OS authentication login interface can crash the management d
CVE-2026-86104 HIGH
8.7 Sep 29

Denial of service in WatchGuard Fireware OS allows a remote, unauthenticated attacker to exhaust resources on the applia
CVE-2026-78010 HIGH
8.7 Aug 27

Stack-based buffer overflow in the iked (IKE daemon) process of WatchGuard Fireware OS allows a remote unauthenticated a
CVE-2026-19314 HIGH
8.7 Aug 27

Remote unauthenticated denial-of-service in WatchGuard Fireware OS targets the iked process, which handles IKE-based VPN
CVE-2026-19317 HIGH
8.7 Aug 27

Out-of-bounds read in the WatchGuard Fireware OS iked (Internet Key Exchange daemon) process enables remote unauthentica

Same weakness CWE-176 – Improper Handling of Unicode Encoding

View all
CVE-2025-71316 CRITICAL POC
9.2
CVE-2026-93990 HIGH POC
8.7
CVE-2026-25480 MEDIUM POC
6.5
CVE-2026-23950 MEDIUM POC
5.9
CVE-2024-24691 CRITICAL
9.8
CVE-2023-39213 CRITICAL
9.8
CVE-2025-55129 MEDIUM POC
5.4
CVE-2023-41889 MEDIUM POC
5.3

Same technique Information Disclosure

View all
CVE-2019-2725 CRITICAL POC
9.8
CVE-2021-34523 CRITICAL POC
9.0
CVE-2013-2251 CRITICAL POC
9.8
CVE-2017-5638 CRITICAL POC
9.8
CVE-2025-24813 CRITICAL POC
9.8
CVE-2015-1701 HIGH POC
7.8
CVE-2017-0147 HIGH POC
7.5
CVE-2014-6324 HIGH POC
8.8

Share

EUVD-2026-89492 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy