CVE-2026-13086: Fireware OS Stack-Based Buffer Overflow in Mobile Security epm Endpoint
Published Aug 27, 2026
·Updated
A stack-based buffer overflow in the epm (Endpoint Protection Manager) service used by the deprecated Mobile Security feature in WatchGuard Fireware OS allows an unauthenticated remote attacker to execute arbitrary code.
Event History
Aug 27, 2026
CVE Published
via MITRE·11:24 PM
Data Sourced
via MITRE·11:24 PM
RemedyDescriptionWeakness
Frequently Asked Questions
1
What level of access does an attacker need?
The issue can be exploited by an unauthenticated remote attacker; no credentials are required.
2
Which component should be prioritized for investigation?
Prioritize systems using the epm (Endpoint Protection Manager) service associated with the deprecated Mobile Security feature in WatchGuard Fireware OS.