CVE-2026-13086

Vulnerability Description

A stack-based buffer overflow in the epm (Endpoint Protection Manager) service used by the deprecated Mobile Security feature in WatchGuard Fireware OS allows an unauthenticated remote attacker to execute arbitrary code.

Related Weaknesses (CWE)

CWE-798 CWE-121 CWE-787

References

https://psirt.watchguard.com/CVE-2026-13086

FAQ

What is CVE-2026-13086?

CVE-2026-13086 is a documented vulnerability. A stack-based buffer overflow in the epm (Endpoint Protection Manager) service used by the deprecated Mobile Security feature in WatchGuard Fireware OS allows an unauthenticated remote attacker to exe...

How severe is CVE-2026-13086?

CVSS scoring is not yet available for CVE-2026-13086. Check NVD for updates.

Is there a patch for CVE-2026-13086?

Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.