CVE-2026-112710: Fireware OS Heap Buffer Overflow in AD Authentication Service Allows Pre-Authentication Remote Code Execution
A heap-based buffer overflow vulnerability exists in the Fireware OS authentication service allows an attacker who controls or intercepts traffic to the configured Active Directory server to create a denial of service condition and potentially execute arbitrary code by returning a specially crafted response.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Fireware OSto a version that resolves this vulnerability.Fixed in 2026.4 - Upgrade
Upgrade
Fireware OSto a version that resolves this vulnerability.Fixed in 12.12.4 - Upgrade
Upgrade
Fireware OSto a version that resolves this vulnerability.Fixed in 12.5.22
Event History
Frequently Asked Questions
Which deployments are exposed to exploitation?
Deployments that use the affected Fireware OS authentication service with a configured Active Directory server are exposed if an attacker can control or intercept traffic to that Active Directory server.
What access does an attacker need?
The attacker does not need to authenticate to the Fireware OS device first, but must be able to control the configured Active Directory server or intercept its traffic and return a specially crafted response.
What could indicate an attempted or successful exploit?
The provided information identifies denial of service as a possible outcome and states that arbitrary code execution may be possible. It does not provide specific log events, crash signatures, or other indicators of compromise.