CVE-2026-78010: CWE-121 in WatchGuard Fireware OS

This vulnerability (CVE-2026-78010) is a stack-based buffer overflow (CWE-121) in the iked process of WatchGuard Fireware OS. It can be triggered remotely without authentication by sending crafted network traffic, resulting in a Denial of Service condition affecting VPN processing. The CVSS 4.0 base score is 8.7, indicating high severity with network attack vector, low attack complexity, no privileges or user interaction required, and high impact on availability. Affected versions explicitly include =12.0, =2025.0, and =2026.3. No patch or official remediation level has been disclosed by the vendor as of the publication date.

Successful exploitation causes a Denial of Service (DoS) in the VPN processing of WatchGuard Fireware OS, potentially disrupting VPN connectivity and network operations relying on this service. The vulnerability does not require authentication or user interaction and can be triggered remotely, increasing its risk. There is no indication of code execution or data compromise from the provided data.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, monitor for vendor updates and consider applying network-level protections to limit exposure of the iked process to untrusted networks if feasible.