This vulnerability (CVE-2026-8247) in WatchGuard Fireware OS is classified as CWE-120, an out-of-bounds write. It allows an unauthenticated attacker on the same local network segment to potentially execute arbitrary code on affected devices. The affected versions include Fireware OS 11.0 up to and including 11.12.4_Update1, 12.0 up to and including 12.12, and 2025.1 up to and including 2026.2. The CVSS 4.0 vector indicates the attack requires adjacent network access (AV:A), low attack complexity (AC:L), no privileges (PR:N), no user interaction (UI:N), and results in high impact on confidentiality, integrity, and availability. The vendor has not yet provided an official fix or remediation level. No public exploit code or active exploitation has been reported.

An attacker on the same local network segment could exploit this vulnerability to execute arbitrary code on the affected Fireware OS devices. This could lead to full compromise of the device, affecting confidentiality, integrity, and availability of the system. Given the high CVSS score and the nature of the vulnerability, successful exploitation could have serious security consequences for network infrastructure relying on these devices.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or temporary mitigation is currently provided, organizations should monitor WatchGuard advisories closely. Network segmentation to limit access to management interfaces and restricting local network access to trusted devices may reduce exposure until a patch is available.