Yüksek CVSS 7.2
CVE-2026-18145: Fireware: yığıt (stack) taşması
Açıklama (NVD)
A stack-based buffer overflow vulnerability in the spamBlocker (spamd) service of WatchGuard Fireware OS allows an authenticated attacker with administrator privileges to crash the service or potentially execute arbitrary code by sending a specially crafted management request.
Özet bilgiler
- Ürün
- Watchguard Fireware
- CVSS v3.1
- 7.2
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H - CVSS v4.0
- 8.6
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X - EPSS
- %0,39 (yüzdelik 33)
- CWE
- CWE-121
- Yama
- Mevcut
Etkilenen sürümler
| Ürün | Başlangıç | Bitiş | Düzeltildi |
|---|---|---|---|
| watchguard-fireware | 12.0 | — | 12.5.21 |
| watchguard-fireware | 12.12 | — | 12.12.3 |
| watchguard-fireware | 2025.2 | — | 2026.2.3 |
| watchguard-fireware | 2026.3 | — | 2026.3.2 |