ZDI-CAN-30173: ZDI-26-428: WatchGuard FireWare OS admd Stack-based Buffer Overflow Remote Code Execution Vulnerability
Published Jul 15, 2026
·Updated
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of WatchGuard FireWare OS. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.5. The following CVEs are assigned: CVE-2026-8247.
Affected Software
1 affected component
WatchGuard Fireware OS
Event History
Jul 15, 2026
Advisory Published
via ZDI·05:00 AM
Data Sourced
via ZDI·05:00 AM
Description
Frequently Asked Questions
1
What is the severity of ZDI-CAN-30173?
The severity of ZDI-CAN-30173 is rated at 85.
2
How do I fix ZDI-CAN-30173?
To fix ZDI-CAN-30173, update your WatchGuard FireWare OS to the latest version provided by WatchGuard.
3
What type of vulnerability is ZDI-CAN-30173?
ZDI-CAN-30173 is a stack-based buffer overflow vulnerability that allows remote code execution.
4
Who can exploit ZDI-CAN-30173?
Network-adjacent attackers can exploit ZDI-CAN-30173 without requiring authentication.
5
What product is affected by ZDI-CAN-30173?
The affected product for ZDI-CAN-30173 is WatchGuard FireWare OS.