CVE-2025-12026 is a CWE-787 out-of-bounds write vulnerability in WatchGuard Fireware OS. It occurs in the certificate request command and could enable an authenticated user with high privileges to execute arbitrary code via crafted CLI commands. The vulnerability has a CVSS 4.0 base score of 8.6, indicating high severity with network attack vector, low attack complexity, no user interaction, and high impact on confidentiality, integrity, and availability. Affected versions explicitly include Fireware OS versions =12.0, =12.5, and =2025.1. No patch or vendor advisory details are currently available.

An authenticated privileged user could exploit this vulnerability to execute arbitrary code on the affected Fireware OS device. This could lead to full compromise of the system's confidentiality, integrity, and availability. The vulnerability is exploitable remotely over the network without user interaction, increasing its risk in environments where privileged CLI access is available.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict privileged CLI access to trusted administrators only and monitor for suspicious activity related to certificate request commands.