by Kastro
Paper/Archive/CVE-2026-13086

CVE-2026-13086

WatchGuard Fireware OS — Fireware OS Stack-Based Buffer Overflow in Mobile Security epm Endpoint

EPSS 0.7%CVSS 9.3
critical.is priorityof 100
38
CVSS 9.3 (CNA)9.3 / 10 × 3027.9Not in CISA KEV+300.0EPSS percentile 51.7.517 × 2010.3No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

A stack-based buffer overflow in the epm (Endpoint Protection Manager) service used by the deprecated Mobile Security feature in WatchGuard Fireware OS allows an unauthenticated remote attacker to execute arbitrary code.

Affected

ProductAffectedFixed inSource
Fireware OS2025.0 – < 2026.2.22026.2.2CNA
Fireware OS12.0 – < 12.12.212.12.2CNA
Fireware OS2026.3 – < 2026.3.12026.3.1CNA
Fireware OS12.0 – < 12.5.2012.5.20CNA

Scores by source

WatchGuard (CNA)9.3CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

advisorypsirt.watchguard.com/CVE-2026-13086