[UPDATE] [hoch] WatchGuard Firebox OS: Mehrere Schwachstellen

Kurzinfo

Metadaten

Original (extern): Link oeffnen
Veroeffentlicht: 2026-09-10 11:37 UTC
Importiert: 2026-09-11 10:28 UTC
CVSS: 9.3
Quelle-ID: cert_bund
uid_hash: 8c15a4571f212138f5fc12e995c5381ca228478a482d15f09560a79375316504

CERT-Bund (BSI)

Inhalt

Ein Angreifer kann mehrere Schwachstellen in WatchGuard Firebox OS ausnutzen, um beliebigen Code – einschließlich Code mit Root-Rechten – auszuführen oder einen Denial-of-Service-Zustand herbeizuführen.

Verknuepfte CVEs

CVE-ID	Severity (Quelle)	CVSS (Quelle)	Severity (CVE.org)	CVSS (CVE.org)	EPSS	EPSS-Pctl	Veroeffentlicht (CVE.org)
CVE-2026-13086	CRITICAL	9.3	CRITICAL	9.3			2026-08-27
CVE-2026-19313	CRITICAL	9.3	CRITICAL	9.3			2026-08-27
CVE-2026-19314	CRITICAL	9.3	HIGH	8.7			2026-08-27
CVE-2026-19315	CRITICAL	9.3	CRITICAL	9.3			2026-08-27
CVE-2026-19316	CRITICAL	9.3	HIGH	8.7			2026-08-27
CVE-2026-19317	CRITICAL	9.3	HIGH	8.7			2026-08-27
CVE-2026-19318	CRITICAL	9.3	CRITICAL	9.3			2026-08-27
CVE-2026-78008	CRITICAL	9.3	HIGH	8.6			2026-08-27
CVE-2026-78009	CRITICAL	9.3	HIGH	8.7			2026-08-27
CVE-2026-78010	CRITICAL	9.3	HIGH	8.7			2026-08-27
CVE-2026-78011	CRITICAL	9.3	HIGH	8.7			2026-08-27
CVE-2026-81851	CRITICAL	9.3	MEDIUM	6.9			2026-08-27

Externe Referenzen

Bezeichnung	Typ	CVE	Quelle
WatchGuard PSIRT Advisories vom 2026-08-27	EXTERNAL	-	wid_csaf
CVE-2026-13086 Fireware OS Pre-Authentication Heap Buffer Overflow in iked Allows Remote Code Execution vom 2026-08-27	EXTERNAL	-	wid_csaf
CVE-2026-19313 Fireware OS Pre-Authentication Heap Buffer Overflow in iked Allows Remote Code Execution vom 2026-08-27	EXTERNAL	-	wid_csaf
CVE-2026-19314 Fireware OS Integer Underflow in iked Allows Unauthenticated Denial of Service (DoS) vom 2026-08-27	EXTERNAL	-	wid_csaf
CVE-2026-19315 Fireware OS Pre-Authentication Type Confusion in iked Allows Remote Code Execution vom 2026-08-27	EXTERNAL	-	wid_csaf
CVE-2026-19316 Fireware OS Pre-Authentication Use-After-Free in iked Allows Remote Code Execution vom 2026-08-27	EXTERNAL	-	wid_csaf
CVE-2026-19317 Fireware OS Pre-Authentication Out-of-Bounds Read in iked Allows Denial of Service (DoS) vom 2026-08-27	EXTERNAL	-	wid_csaf
CVE-2026-19318 Fireware OS Pre-Authentication Stack Buffer Overflow in iked Allows Remote Code Execution vom 2026-08-27	EXTERNAL	-	wid_csaf
CVE-2026-78008 Fireware OS Authenticated Buffer Overflow in wgagent vom 2026-08-27	EXTERNAL	-	wid_csaf
CVE-2026-78009 Fireware OS Out-of-Bounds Read in iked Allows Unauthenticated Denial of Service (DoS) vom 2026-08-27	EXTERNAL	-	wid_csaf
CVE-2026-78010 Fireware OS Stack-Based Buffer Overflow in iked Allows Unauthenticated Denial of Service vom 2026-08-27	EXTERNAL	-	wid_csaf
CVE-2026-78011 Fireware OS Integer Underflow in Iked Allows Unauthenticated Denial of Service (DoS) vom 2026-08-27	EXTERNAL	-	wid_csaf
CVE-2026-81851 Fireware OS Heap-Based Buffer Overflow in iked Allows Denial of Service vom 2026-08-27	EXTERNAL	-	wid_csaf
WatchGuard Blog: Immediate Action Required - Update Your Firebox Now vom 2026-08-27	EXTERNAL	-	wid_csaf

Quellen-Details

Bezeichnung	Name	Kategorie	Tags	Zielgruppe	Sprache	Feed-URL
CERT-Bund (BSI)	cert_bund	government_cert		-	de	https://wid.cert-bund.de/content/public/securityAdvisory/rss

Zurueck zur Eintrags-Liste