← Back

CVE-2026-18145

nvd nist
Published: Sep 30, 2026Modified: Oct 8, 2026

JSON object

Loading...
8.6
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Show more
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:XShow less
Source: 5d1c2695-1a31-4499-88ae-e847036fd7e3 (Secondary)

Description

A stack-based buffer overflow vulnerability in the spamBlocker (spamd) service of WatchGuard Fireware OS allows an authenticated attacker with administrator privileges to crash the service or potentially execute arbitrary code by sending a specially crafted management request.

Affected (4)

Products: Watchguard: Fireware
Watchguard
1 product
Fireware
Configuration A
4 vulnerable
Vulnerable SoftwareAffected Versions
Watchguard
Fireware
12.0 ≤ version < 12.5.21
Fireware
12.12 ≤ version < 12.12.3
Fireware
2025.2 ≤ version < 2026.2.3
Fireware
2026.3 ≤ version < 2026.3.2

Related CWEs

CWE-121
Stack-based Buffer Overflow
A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function).

References (1)

Source: 5d1c2695-1a31-4499-88ae-e847036fd7e3
PatchVendor Advisory

Timeline

No history available yet.