CVE-2026-111107: Fireware OS NULL Pointer Dereference in Management Interface Allows Unauthenticated Denial of Service
A NULL pointer dereference vulnerability in WatchGuard Fireware OS’s management interface allows a remote, unauthenticated attacker with network access to the management interface to crash the management service by sending a specially crafted login request. Repeated exploitation terminates all active administrator sessions and in-progress management operations and can prevent management of the device. Traffic processing is not affected.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
WatchGuard Fireware OSto a version that resolves this vulnerability.Fixed in 2026.4 - Upgrade
Upgrade
WatchGuard Fireware OSto a version that resolves this vulnerability.Fixed in 12.12.4 - Upgrade
Upgrade
WatchGuard Fireware OSto a version that resolves this vulnerability.Fixed in 12.5.22
Event History
Frequently Asked Questions
Which systems are exposed to this issue?
WatchGuard Fireware OS devices are exposed if their management interface is reachable by a remote attacker over the network. The issue affects the management service rather than traffic processing.
What does an attacker need to exploit the vulnerability?
An attacker needs network access to the management interface but does not need to authenticate. Exploitation consists of sending a specially crafted login request.
What is the operational impact of repeated exploitation?
Repeated requests can crash the management service, terminate active administrator sessions, and interrupt management operations. This can prevent administrators from managing the device, while traffic processing remains unaffected.