Vulnerability Description
A NULL pointer dereference vulnerability in WatchGuard Fireware OS’s management interface allows a remote, unauthenticated attacker with network access to the management interface to crash the management service by sending a specially crafted login request. Repeated exploitation terminates all active administrator sessions and in-progress management operations and can prevent management of the device. Traffic processing is not affected.
Related Weaknesses (CWE)
References
FAQ
What is CVE-2026-111107?
CVE-2026-111107 is a documented vulnerability. A NULL pointer dereference vulnerability in WatchGuard Fireware OS’s management interface allows a remote, unauthenticated attacker with network access to the management interface to crash the managem...
How severe is CVE-2026-111107?
CVSS scoring is not yet available for CVE-2026-111107. Check NVD for updates.
Is there a patch for CVE-2026-111107?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.