CVE-2026-86131

Published on September 29, 2026

A code injection vulnerability in WatchGuard Fireware OS's BOVPN Over TLS client configuration handling allows an attacker who controls the remote VPN server to execute arbitrary commands as root on the connecting Firebox.

Weakness type (CWE)CWE-94, CWE-295, CWE-829

Vulnerabilities

Malicious VPN Server Could Seize Root Control of WatchGuard Firebox Appliances

WatchGuard patched 15 Fireware OS flaws, including critical CVE-2026-86131 for root RCE via malicious BOVPN over TLS server.

Sep 30, 202623:275 min readRead

This product uses the NVD API but is not endorsed or certified by the NVD.

CVE database

Related articles

Malicious VPN Server Could Seize Root Control of WatchGuard Firebox Appliances