CVE-2026-19318: CWE-121 in WatchGuard Fireware OS

This vulnerability (CVE-2026-19318) is a stack-based buffer overflow in the iked process of WatchGuard Fireware OS. It enables remote unauthenticated attackers to execute arbitrary code by sending crafted network traffic. The flaw is classified under CWE-121 (stack-based buffer overflow) and related weaknesses. The CVSS 4.0 vector indicates it is exploitable over the network without authentication or user interaction, with high impact on system security. The affected product is WatchGuard Fireware OS, including versions 2025.0 and 12.0, though exact version ranges are unclear. There is no vendor patch information or advisory provided in the input, and no known exploits in the wild have been reported.

Successful exploitation allows remote unauthenticated attackers to execute arbitrary code on the affected WatchGuard Fireware OS device, potentially leading to full compromise of the system. The vulnerability impacts confidentiality, integrity, and availability with high severity. This could enable attackers to control the device, disrupt network security functions, or use the device as a foothold for further attacks.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or patch information is provided in the available data. Until a patch is available, network administrators should monitor for unusual network traffic targeting the iked process and consider applying network-level protections to limit exposure. Follow WatchGuard's official security advisories for updates.