CVE-2026-86104: Fireware OS Resource Exhaustion in Login Process Allows Denial of Service
Published Sep 29, 2026
·Updated
An uncontrolled resource consumption vulnerability in the Fireware OS login process (wgagent) allows a remote, unauthenticated attacker to cause a denial of service by sending a specially crafted request.
Affected Software
5 affected components
WatchGuard Fireware OS
WatchGuard Fireware>=12.0<12.5.21
WatchGuard Fireware>=12.12<12.12.3
WatchGuard Fireware>=2025.0<2026.2.3
WatchGuard Fireware>=2026.3<2026.3.2
Event History
Sep 29, 2026
CVE Published
via MITRE·11:05 PM
Data Sourced
via MITRE·11:05 PM
RemedyDescriptionWeakness
Sep 30, 2026
Data Sourced
via NVD·12:16 AM
RemedyDescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
Who can exploit this issue?
A remote, unauthenticated attacker can exploit the issue by sending a specially crafted request to the affected Fireware OS login process, wgagent.
2
What is the expected impact of a successful attack?
Successful exploitation can exhaust resources in the login process and cause a denial of service.