CVE-2026-90442: Fireware OS Authenticated Stack Buffer Overflow in certd Allows Denial of Service
Published Oct 27, 2026
·Updated
A stack-based buffer overflow vulnerability in the Fireware OS certd process allows an authenticated attacker with access to the Firebox management interface to crash the certificate management service and potentially execute arbitrary code by sending a specially crafted request.
Affected Software
1 affected component
WatchGuard Fireware OS
Event History
Oct 27, 2026
CVE Published
via MITRE·03:52 PM
Data Sourced
via MITRE·03:52 PM
RemedyDescriptionWeakness
Frequently Asked Questions
1
Who can exploit this vulnerability?
An attacker must be authenticated and have access to the Firebox management interface. The provided information does not indicate that unauthenticated or network-only access is sufficient.
2
What impact could successful exploitation have?
A crafted request can crash the certd certificate management service, causing a denial of service. The vulnerability may also allow arbitrary code execution.
3
How is the vulnerable service targeted?
The attacker sends a specially crafted request to the certd process through the Firebox management interface.