CVE-2026-18145CWE-121

CVE-2026-18145

High · published September 30, 2026

CVSS v3.1

7.2

EPSS

Percentile

31.8

In the wild

Unconfirmed

What it is

A stack-based buffer overflow vulnerability in the spamBlocker (spamd) service of WatchGuard Fireware OS allows an authenticated attacker with administrator privileges to crash the service or potentially execute arbitrary code by sending a specially crafted management request.

The record

Technical detail

CVSS v3.1: 7.2 · HIGH
Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0: 8.6 · CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS: 0.00389 · 31.8th percentile
Weakness: CWE-121 · Stack-based Buffer Overflow
Published: 2026-09-30T04:16Z

Affected products (4)

Product	Versions	Fixed in
watchguard/fireware	≥ 12.0, < 12.5.21	12.5.21
watchguard/fireware	≥ 12.12, < 12.12.3	12.12.3
watchguard/fireware	≥ 2025.2, < 2026.2.3	2026.2.3
watchguard/fireware	≥ 2026.3, < 2026.3.2	2026.3.2

References (1)

https://psirt.watchguard.com/CVE-2026-18145 · 5d1c2695-1a31-4499-88ae-e847036fd7e3

EPSS history

Timeline

01 OCT 03:44Z
EPSS moved — → 0%
epss
29 SEP 23:05Z
Fireware OS Stack-based Buffer Overflow in spamd Allows Remote Code Execution
cvelistv5