This vulnerability (CWE-787) in WatchGuard Fireware OS arises from an out-of-bounds write condition in the networkd process. An authenticated user with elevated privileges can exploit this flaw by crafting malicious requests to the Management Web UI, potentially leading to arbitrary code execution. The CVSS 4.0 base score is 8.6, indicating high severity with network attack vector, low attack complexity, no user interaction, and high impacts on confidentiality, integrity, and availability. The affected versions include specific releases such as 11.8, 12.0, 12.5, 2025.1, and ranges from 12.0 to 12.12 and 2025.1 to 2026.2. No vendor advisory or patch information is currently available, and no known exploits in the wild have been reported.

Successful exploitation allows an authenticated privileged user to execute arbitrary code on the affected Fireware OS device, potentially compromising system confidentiality, integrity, and availability. This could lead to full control over the device and disruption of network security functions.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict access to the Management Web UI to trusted administrators only and monitor for suspicious activity. Avoid granting unnecessary privileged access to users.