What’s Vulnerable › Vulnerabilities
CVE-2026-18145: Fireware OS Stack-based Buffer Overflow in spamd Allows Remote Code Execution
- Severity: high (CVSS 7.2 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.4% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2026-09-30 · updated 2026-10-08
- Weakness: CWE-121
Description
A stack-based buffer overflow vulnerability in the spamBlocker (spamd) service of WatchGuard Fireware OS allows an authenticated attacker with administrator privileges to crash the service or potentially execute arbitrary code by sending a specially crafted management request.
Affected products
- WatchGuard Fireware OS: from 12.0 before 12.5.21; from 12.12 before 12.12.3; from 2025.2 before 2026.2.3; from 2026.3 before 2026.3.2 — fixed in 12.12.3, 12.5.21, 2026.2.3, 2026.3.2
How to fix
Upgrade to a fixed version: WatchGuard Fireware OS 12.12.3, 12.5.21, 2026.2.3, 2026.3.2. Check the vendor advisory for mitigations.
In the news
References
Get alerted when CVE-2026-18145 or the next vulnerability affects your stack