CVE-2026-78010: Fireware OS Stack-Based Buffer Overflow in iked Allows Unauthenticated Denial of Service

Published Aug 27, 2026

Updated

A stack-based buffer overflow vulnerability in the WatchGuard Fireware OS iked process iallows a remote unauthenticated attacker to create a Denial of Service (DoS) condition in VPN processing by sending specially crafted network traffic.

Affected Software

1 affected component

WatchGuard Fireware OS

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade WatchGuard Fireware OS iked to a version that resolves this vulnerability.
Fixed in 2026.2.2
Upgrade
Upgrade WatchGuard Fireware OS iked to a version that resolves this vulnerability.
Fixed in 12.12.2
Upgrade
Upgrade WatchGuard Fireware OS iked to a version that resolves this vulnerability.
Fixed in 12.5.20

Event History

Aug 27, 2026

CVE Published

via MITRE·11:24 PM

Data Sourced

via MITRE·11:24 PM

RemedyDescriptionWeakness

Aug 28, 2026

Data Sourced

via NVD·02:16 AM

DescriptionSeverityWeakness

Frequently Asked Questions

Which deployments are exposed to this issue?

Deployments running WatchGuard Fireware OS with VPN processing exposed to network traffic are relevant, because the affected iked process handles VPN-related traffic. The provided information does not identify specific versions or configurations.

What does an attacker need to exploit it?

An attacker can be remote and unauthenticated. Exploitation requires sending specially crafted network traffic to trigger the stack-based buffer overflow in iked.

What is the expected impact?

The stated impact is a denial-of-service condition in VPN processing. The provided information does not claim code execution, authentication bypass, or data exposure.