CVE-2026-112709: Fireware OS Heap Buffer Overflow in AD Authentication Service Allows Pre-Authentication Remote Code Execution
A heap-based buffer overflow vulnerability in the Fireware OS authentication service allows an attacker who controls or intercepts traffic to the configured Active Directory server to create a denial of service condition and potentially execute arbitrary code by returning a specially crafted response.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Fireware OSto a version that resolves this vulnerability.Fixed in 2026.4 - Upgrade
Upgrade
Fireware OSto a version that resolves this vulnerability.Fixed in 12.12.4 - Upgrade
Upgrade
Fireware OSto a version that resolves this vulnerability.Fixed in 12.5.22
Event History
Frequently Asked Questions
Which deployments are exposed to this issue?
Deployments with Fireware OS configured to use an Active Directory server are exposed when an attacker can control or intercept traffic to that configured server.
What access or position does an attacker need?
The attacker must be able to control the configured Active Directory server or intercept traffic between the authentication service and that server, then return a specially crafted response. No prior authentication is described.
What could exploitation cause?
A crafted Active Directory response can cause a denial of service condition and may allow arbitrary code execution in the Fireware OS authentication service.