CVE-2026-113881: Fireware OS Stack Buffer Overflow in VPN Network Access Enforcement Allows Unprivileged Code Execution
Published Oct 27, 2026
·Updated
A stack-based buffer overflow vulnerability in Fireware OS's VPN Network Access Enforcement process allows an authenticated mobile VPN user to create a denial of service condition and potentially execute arbitrary code as an unprivileged process by sending a specially crafted request.
Affected Software
1 affected component
WatchGuard Fireware OS
Event History
Oct 27, 2026
CVE Published
via MITRE·03:52 PM
Data Sourced
via MITRE·03:52 PM
RemedyDescriptionWeakness
Frequently Asked Questions
1
Who can exploit this issue?
An attacker must be an authenticated mobile VPN user. The provided information does not indicate that unauthenticated internet users can exploit it.
2
What impact can exploitation have?
A specially crafted request can cause a denial of service condition and may allow arbitrary code execution as an unprivileged process.
3
What attacker access or action is required?
The attacker needs valid mobile VPN authentication and must send a specially crafted request to the VPN Network Access Enforcement process.