CVE-2026-18105: CWE-400 in WatchGuard Fireware OS
An uncontrolled resource consumption vulnerability in Fireware OS's diagnostic tasks feature allows a low-privileged, authenticated user to cause a denial of service of the system's diagnostic tools by repeatedly starting and aborting a specially crafted diagnostic task through the web UI.
AI Analysis
Technical Summary
This vulnerability (CVE-2026-18105) in WatchGuard Fireware OS arises from uncontrolled resource consumption in the diagnostic tasks feature. A low-privileged authenticated user can repeatedly start and abort diagnostic tasks through the web interface, leading to denial of service of the system's diagnostic tools. The CVSS 4.0 score is 7.1 (high severity), reflecting network attack vector, low attack complexity, no user interaction, and high impact on availability. The affected versions include multiple ranges from 12.0 up to but excluding 12.5.21, 12.12.3, 2026.3.2, and 2026.2.3.
Potential Impact
The vulnerability allows disruption of the system's diagnostic tools by causing denial of service through resource exhaustion. This can impair administrators' ability to monitor and troubleshoot the Fireware OS, potentially delaying response to other issues. There is no indication of privilege escalation or data compromise from the provided data.
Mitigation Recommendations
No patch or official fix information is provided in the input data. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict access to the web UI to trusted users only and monitor for unusual diagnostic task activity if possible.
CVE-2026-18105: CWE-400 in WatchGuard Fireware OS
Description
An uncontrolled resource consumption vulnerability in Fireware OS's diagnostic tasks feature allows a low-privileged, authenticated user to cause a denial of service of the system's diagnostic tools by repeatedly starting and aborting a specially crafted diagnostic task through the web UI.
CVSS v4.0
Score 7.1high
Affected software
WatchGuard
Fireware OS
WatchGuard
Fireware OS
pkg:github/watchguard/fireware-osRun on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
This vulnerability (CVE-2026-18105) in WatchGuard Fireware OS arises from uncontrolled resource consumption in the diagnostic tasks feature. A low-privileged authenticated user can repeatedly start and abort diagnostic tasks through the web interface, leading to denial of service of the system's diagnostic tools. The CVSS 4.0 score is 7.1 (high severity), reflecting network attack vector, low attack complexity, no user interaction, and high impact on availability. The affected versions include multiple ranges from 12.0 up to but excluding 12.5.21, 12.12.3, 2026.3.2, and 2026.2.3.
Potential Impact
The vulnerability allows disruption of the system's diagnostic tools by causing denial of service through resource exhaustion. This can impair administrators' ability to monitor and troubleshoot the Fireware OS, potentially delaying response to other issues. There is no indication of privilege escalation or data compromise from the provided data.
Mitigation Recommendations
No patch or official fix information is provided in the input data. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict access to the web UI to trusted users only and monitor for unusual diagnostic task activity if possible.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- WatchGuard
- Date Reserved
- 2026-07-28T17:46:55.307Z
- Cvss Version
- 4.0
- State
- PUBLISHED
Threat ID: 6abc4824680226ef686df2b3
Added to database: 09/29/2026, 23:22:12 UTC
Last enriched: 09/29/2026, 23:36:59 UTC
Last updated: 09/30/2026, 03:03:19 UTC
Views: 7
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
External Links
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.