CVE-2026-8247CWE-120CWE-787

CVE-2026-8247

High · published July 3, 2026

CVSS v3.1
8.8
EPSS
0%
Percentile
31.1
In the wild
Unconfirmed
What it is

An Out-of-bounds Write vulnerability in WatchGuard Fireware OS may allow an unauthenticated attacker on the same local network segment to execute arbitrary code.

This vulnerability affects Fireware OS 11.0 up to and including 11.12.4_Update1, 12.0 up to and including 12.12 and 2025.1 up to and including 2026.2.

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00383 · 31.1th percentile
Weaknesses
CWE-120 · Buffer Copy without Checking Size of Input ('Classic Buffer Overflow'); CWE-787 · Out-of-bounds Write
Published
2026-07-03T04:16Z
Affected products (6)
ProductVersionsFixed in
watchguard/fireware≥ 11.0.0, < 11.12.411.12.4
watchguard/firewareall versions—
watchguard/firewareall versions—
watchguard/fireware≥ 12.5, < 12.5.1912.5.19
watchguard/fireware≥ 2025.1, < 2026.2.12026.2.1
watchguard/fireware≥ 12.0, < 12.12.112.12.1
References (2)
https://psirt.watchguard.com/CVE-2026-8247 · 5d1c2695-1a31-4499-88ae-e847036fd7e3https://www.watchguard.com/wgrd-psirt/advisory/wgsa-2026-00026 · 5d1c2695-1a31-4499-88ae-e847036fd7e3
EPSS history
Timeline
  • 02 JUL 23:07Z
    WatchGuard Firebox admd Out of Bounds Write Vulnerability
    cvelistv5