CVE-2025-12026

8.6 highEPSS 0.4%

High (8.6) in watchguard fireware. EPSS 0.4% chance of exploitation in the next 30 days.

An Out-of-bounds Write vulnerability in WatchGuard Fireware OS’s certificate request command could allow an authenticated privileged user to execute arbitrary code via specially crafted CLI commands.

Severity

CVSS 4.0

8.6 high

CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

CVSS 3.1

7.2 high

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.4% chance of exploitation in the next 30 days; higher than 38% of CVEs (scores of 2026-10-31)
CWE: CWE-787
Published: 2025-12-04
Modified: 2026-08-10
Record from: the NVD, synced 2026-10-19

Affected

watchguard:fireware

References

https://psirt.watchguard.com/CVE-2025-12026
https://www.watchguard.com/wgrd-psirt/advisory/wgsa-2025-00017

Check your stack JSON