WatchGuard released fixes for 15 vulnerabilities in Fireware OS, including CVE-2026-86131, a critical RCE flaw that could let a remote attacker controlling a VPN server execute commands as root on a Firebox appliance. The update also addresses multiple high-severity issues and recent Access Point flaws in WatchGuard AP, with no known evidence of exploitation in the wild. #CVE-2026-86131 #WatchGuard #FirewareOS #WatchGuardAP #Firebox
Keypoints
- WatchGuard patched 15 vulnerabilities in Fireware OS.
- CVE-2026-86131 is a critical code injection flaw leading to RCE.
- The bug could allow root-level command execution on Firebox appliances.
- The release also fixes 13 high-severity issues and one medium-severity authorization flaw.
- WatchGuard AP version 3.4.8 resolves three additional Access Point vulnerabilities.
Read More: https://www.securityweek.com/watchguard-patches-critical-fireware-os-code-injection-vulnerability/