A maliciously crafted dynamic library, when loaded from an arbitrary path through the TextCommands.LoadDll command exposed by the Autodesk Fusion API, can trigger an Exposed Dangerous Function vulnerability in the Autodesk Fusion desktop application. A malicious actor may leverage this vulnerability to execute arbitrary code in the context of the current process.
A maliciously crafted HTML payload in the description of an electronic library (.lbr) file, when displayed in the Library Manager after the library is imported, can trigger a Stored Cross-site Scripting (XSS) vulnerability in the Autodesk Fusion desktop application. A malicious actor may leverage this vulnerability to read local files or execute arbitrary code in the context of the current process.
A maliciously crafted HTML payload in the documentName parameter of a Fusion protocol URL, when the protocol URL is invoked by a user, can trigger a Reflected Cross-site Scripting (XSS) vulnerability in the Autodesk Fusion desktop application. A malicious actor may leverage this vulnerability to read local files or execute arbitrary code in the context of the current process.
A maliciously crafted HTML payload in a design name, when displayed after another user opens the manipulated design, can trigger a Stored Cross-site Scripting (XSS) vulnerability in the Autodesk Fusion desktop application. A malicious actor may leverage this vulnerability to read local files or execute arbitrary code in the context of the current process.
CVE-2026-107672 is a command injection vulnerability in Autodesk Fusion Post Processor Utility versions 5.0.1 up to but not including 5.0.2. It arises from a trusted Markdown injection triggered by a maliciously crafted .stack.json file, allowing an attacker to execute arbitrary commands with the current user's privileges. The vulnerability has a high severity with a CVSS score of 8.8. A fix is available in version 5.0.2.
CVE-2026-117511 is an OS command injection vulnerability in the desmondmorris node-tesseract library versions 0.2.0 through 0.2.7. The flaw exists in the process function of the lib/tesseract.js file within the Command Builder component, where manipulation of the image argument can lead to remote command injection. The vulnerability has a CVSS 4.0 score of 6.9 (medium severity). Public exploit code has been disclosed, but no official patch or vendor response is currently available.
CVE-2026-116863 is a critical Cross-Site Request Forgery (CSRF) vulnerability affecting Tribulant Software's Newsletters plugin (versions up to 4.18.2). This flaw allows attackers to perform unauthorized actions on behalf of authenticated users. The vulnerability impacts confidentiality, integrity, and availability of the affected system.
CVE-2026-115495 is a vulnerability in the WatchGuard Mobile VPN with SSL client for Windows that allows a local attacker who can capture loopback network traffic to obtain the user's VPN username and password due to cleartext transmission of sensitive information. This issue affects versions from 12.0 up to but not including 2026.4. A fix is available in version 2026.4. The vulnerability has a medium severity rating with a CVSS 4.0 score of 5.7.
CVE-2026-90465 is an authentication bypass vulnerability in WatchGuard Fireware OS affecting the FireCluster Sync processing. An attacker on the cluster interconnect, such as a compromised cluster peer or an on-path network attacker, can send specially crafted requests to perform privileged firewall management actions as root. The vulnerability affects multiple version ranges of Fireware OS and has been assigned a high severity score. Fixed versions are available.
CVE-2026-93862 is an out-of-bounds read vulnerability in WatchGuard Fireware OS affecting the FireCluster Sync processing. An attacker on the cluster interconnect can send crafted network traffic to repeatedly crash the cluster synchronization process, causing a sustained denial of service. The vulnerability affects multiple version ranges of Fireware OS and has been assigned a high severity rating with a CVSS score of 7.2. Fixed versions are available.
CVE-2026-112709 is a critical heap-based buffer overflow vulnerability in the WatchGuard Fireware OS authentication service. It affects versions 2025.1 up to but not including 2026.4, 12.0 up to but not including 12.12.4, and 12.0 up to but not including 12.5.22. An attacker who can control or intercept traffic to the configured Active Directory server can exploit this flaw by returning a specially crafted response, potentially causing denial of service or arbitrary code execution. The vulnerability has a CVSS 4.0 score of 9.2, indicating high impact on confidentiality, integrity, and availability. Fixed versions are available starting from 2026.4, 12.12.4, and 12.5.22 respectively.
CVE-2026-90464 is a high-severity vulnerability in WatchGuard Fireware OS that allows a remote, authenticated attacker with read-only Device Monitor privileges and CLI access to create, truncate, or overwrite arbitrary files and modify kernel parameters with root privileges via a specially crafted diagnostic command. The vulnerability involves external control of file paths in a firewall diagnostic command. The issue is fixed in Fireware OS versions 2026.4, 12.12.4, and 12.5.22.
CVE-2026-103593 is a critical stack-based buffer overflow vulnerability in the WatchGuard Fireware OS logging service. It allows a network-adjacent attacker who can impersonate or intercept traffic to the configured log server to execute arbitrary code with root privileges by presenting a specially crafted certificate. The vulnerability affects multiple versions of Fireware OS prior to fixed releases. A high-severity CVSS 4.0 score of 9.1 reflects the potential for remote code execution without user interaction or privileges.
CVE-2026-113881 is a stack-based buffer overflow vulnerability in WatchGuard Fireware OS affecting the VPN Network Access Enforcement process. An authenticated mobile VPN user can exploit this flaw by sending a specially crafted request, causing a denial of service and potentially executing arbitrary code as an unprivileged process. The vulnerability affects Fireware OS versions from 2025.1 up to but not including 2026.4, and versions from 12.9 up to but not including 12.12.4. A fix is available in versions 2026.4 and 12.12.4. The CVSS 4.0 base score is 6.1, indicating medium severity.
CVE-2026-93434 is an XPath injection vulnerability in WatchGuard Fireware OS affecting the SSH authentication process. It allows a remote, unauthenticated attacker with access to the management SSH interface to extract sensitive configuration data by submitting specially crafted requests. The vulnerability affects multiple versions prior to 12.5.22, 2026.4, and 12.12.4. It has a high severity score of 8.7 and has been officially fixed in the specified versions.
CVE-2026-90442 is a stack-based buffer overflow vulnerability in the certd process of WatchGuard Fireware OS. It affects versions 2025.1 up to but not including 2026.4, 12.0 up to but not including 12.12.4, and 12.0 up to but not including 12.5.22. An authenticated attacker with access to the Firebox management interface can exploit this flaw by sending a specially crafted request, causing the certificate management service to crash and potentially allowing arbitrary code execution. The vulnerability has a high severity with a CVSS 4.0 score of 8.6. Fixed versions are 2026.4, 12.12.4, and 12.5.22.
CVE-2026-112710 is a critical heap-based buffer overflow vulnerability in the WatchGuard Fireware OS authentication service. It affects versions 2025.1 up to but not including 2026.4, 12.0 up to but not including 12.12.4, and 12.0 up to but not including 12.5.22. An attacker who can control or intercept traffic to the configured Active Directory server can exploit this flaw by sending a specially crafted response, potentially causing denial of service or arbitrary code execution. The vulnerability has a CVSS 4.0 base score of 9.2, indicating high impact on confidentiality, integrity, and availability. Fixed versions are available in 2026.4, 12.12.4, and 12.5.22.
CVE-2026-82332 is an improper authentication vulnerability in WatchGuard Fireware OS's AuthPoint multi-factor authentication process. It allows a local, unauthenticated attacker on the appliance to hijack another user's active MFA session by sending a specially crafted request and tricking the victim into accepting an MFA push notification. The vulnerability affects Fireware OS versions from 2025.1 up to but not including 2026.4, and versions from 12.7 up to but not including 12.12.4. A fix is available in versions 2026.4 and 12.12.4. The CVSS 4.0 base score is 5.6, indicating medium severity.
CVE-2026-93857 is a critical stack-based buffer overflow vulnerability in WatchGuard Fireware OS's SIP proxy. It allows a remote, unauthenticated attacker to execute arbitrary code by sending a specially crafted request through a policy that uses the SIP proxy. The vulnerability affects multiple versions of Fireware OS prior to fixed releases. A high-severity CVSS 4.0 score of 9.2 reflects the ease of exploitation and potential impact. Fixed versions are available, and users should upgrade to mitigate this risk.