This vulnerability (CWE-787) in WatchGuard Fireware OS involves an out-of-bounds write in the command-line interface. An authenticated user with elevated privileges can exploit this flaw by sending a specially crafted CLI command, potentially leading to arbitrary code execution. The vulnerability affects several versions including 11.0, 12.0, 12.5, 2025.1, and ranges from 12.0 through 12.12 and 2025.1 through 2026.2. The CVSS 4.0 base score is 8.6, indicating high severity with network attack vector, low attack complexity, no user interaction, and high impacts on confidentiality, integrity, and availability.

Successful exploitation could allow an authenticated privileged user to execute arbitrary code on the affected Fireware OS device, potentially compromising system integrity and availability. The vulnerability requires privileged authentication, limiting exposure to trusted users with CLI access.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict CLI access to trusted administrators only and monitor for unusual activity. No known exploits are reported in the wild at this time.