CVE-2026-93857: Fireware OS Pre-Authentication Stack Buffer Overflow in SIP Proxy Allows Remote Code Execution
Published Oct 27, 2026
·Updated
A stack-based buffer overflow vulnerability in Fireware OS's SIP proxy allows a remote, unauthenticated attacker to execute arbitrary code by sending a specially crafted request through a policy that uses the SIP proxy.
Affected Software
1 affected component
WatchGuard Fireware OS
Event History
Oct 27, 2026
CVE Published
via MITRE·03:52 PM
Data Sourced
via MITRE·03:52 PM
RemedyDescriptionWeakness
Frequently Asked Questions
1
Which deployments are exposed?
Deployments with a policy that uses the SIP proxy are exposed if a remote attacker can send a specially crafted request through that policy.
2
Does exploitation require authentication?
No. The vulnerability can be exploited by a remote, unauthenticated attacker.