CVE-2026-81433

Published on September 29, 2026

A stack-based buffer overflow vulnerability in WatchGuard Fireware OS's DHCP fingerprinting daemon (fingerd) allows an unauthenticated attacker with adjacent network access to execute arbitrary code or crash the process by sending a specially crafted DHCP packet.

Weakness type (CWE)CWE-120, CWE-121, CWE-787

Vulnerabilities

Malicious VPN Server Could Seize Root Control of WatchGuard Firebox Appliances

WatchGuard patched 15 Fireware OS flaws, including critical CVE-2026-86131 for root RCE via malicious BOVPN over TLS server.

Sep 30, 202623:275 min readRead

This product uses the NVD API but is not endorsed or certified by the NVD.

CVE database

Related articles

Malicious VPN Server Could Seize Root Control of WatchGuard Firebox Appliances