ZDI-26-632: WatchGuard FireWare OS epm connect Stack-based Buffer Overflow Remote Code Execution Vulnerability
Published Sep 9, 2026
·Updated
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of WatchGuard FireWare OS. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 8.8. The following CVEs are assigned: CVE-2026-13086.
Affected Software
1 affected component
WatchGuard Fireware OS
Event History
Sep 9, 2026
Advisory Published
via ZDI·05:00 AM
Data Sourced
via ZDI·05:00 AM
Description
Frequently Asked Questions
1
Who can exploit this issue?
A network-adjacent attacker can exploit it without authentication. The available information does not indicate that prior access to a WatchGuard FireWare OS account is required.
2
What level of impact can exploitation have?
Successful exploitation allows execution of arbitrary code on an affected WatchGuard FireWare OS installation. ZDI assigned the issue a CVSS score of 8.8.