CVE-2026-19314: Fireware OS Integer Underflow in iked Allows Unauthenticated Denial of Service (DoS)

Published Aug 27, 2026

Updated

An integer underflow vulnerability in the WatchGuard Fireware OS iked process allows a remote unauthenticated attacker to create a Denial of Service (DoS) condition in VPN processing by sending specially crafted network traffic.

Affected Software

1 affected component

WatchGuard Fireware OS

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade WatchGuard Fireware OS iked process to a version that resolves this vulnerability.
Fixed in 2026.2.2
Upgrade
Upgrade WatchGuard Fireware OS iked process to a version that resolves this vulnerability.
Fixed in 12.12.2
Upgrade
Upgrade WatchGuard Fireware OS iked process to a version that resolves this vulnerability.
Fixed in 12.5.20

Event History

Aug 27, 2026

CVE Published

via MITRE·11:24 PM

Data Sourced

via MITRE·11:24 PM

RemedyDescriptionWeakness

Frequently Asked Questions

Does exploitation require valid VPN credentials or prior access?

No. The issue can be triggered by a remote unauthenticated attacker using specially crafted network traffic.

Which systems should be prioritized for review?

Prioritize WatchGuard Fireware OS deployments where network traffic can reach the iked process or VPN processing functionality, because the reported impact is denial of service in VPN processing.

Is any impact beyond service availability reported?

The provided information reports a denial-of-service condition only. It does not describe confidentiality or integrity impact.