ZDI-26-750: WatchGuard FireWare OS spamd statushdlr Stack-based Buffer Overflow Remote Code Execution Vulnerability
Published Sep 30, 2026
·Updated
This vulnerability allows remote attackers to execute arbitrary code on affected installations of WatchGuard FireWare OS. Authentication is required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.2. The following CVEs are assigned: CVE-2026-18145.
Affected Software
1 affected component
WatchGuard Fireware OS
Event History
Sep 30, 2026
Advisory Published
via ZDI·05:00 AM
Data Sourced
via ZDI·05:00 AM
Description
Frequently Asked Questions
1
What level of access does an attacker need to exploit this issue?
Authentication is required. The available information does not specify which authenticated role or privilege level is needed.
2
What is the potential impact after successful exploitation?
A remote attacker can execute arbitrary code on an affected WatchGuard FireWare OS installation.