CVE-2026-78008: Fireware OS Authenticated Buffer Overflow in wgagent
A buffer overflow vulnerability in the WatchGuard Fireware OS Management Web UI allows an authenticated administrator with network access to cause a denial of service (DoS) condition or potentially execute arbitrary code by sending specially crafted network traffic.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
WatchGuard Fireware OS Management Web UI (wgagent)to a version that resolves this vulnerability.Fixed in 2026.2.2 - Upgrade
Upgrade
WatchGuard Fireware OS Management Web UI (wgagent)to a version that resolves this vulnerability.Fixed in 12.12.2 - Upgrade
Upgrade
WatchGuard Fireware OS Management Web UI (wgagent)to a version that resolves this vulnerability.Fixed in 12.5.20
Event History
Frequently Asked Questions
Does exploitation require administrator privileges?
Yes. The described attack requires an authenticated administrator account with network access to the Management Web UI.
Is unauthenticated or non-administrator exploitation described?
No. The available information only identifies authenticated administrators with network access as the attack prerequisite.