HIGH · 8.8

CVE-2026-8247

An Out-of-bounds Write vulnerability in WatchGuard Fireware OS may allow an unauthenticated attacker on the same local network segment to execute arbitrary code. This vulnerability affects Firewar...

Vulnerability Description

An Out-of-bounds Write vulnerability in WatchGuard Fireware OS may allow an unauthenticated attacker on the same local network segment to execute arbitrary code. This vulnerability affects Fireware OS 11.0 up to and including 11.12.4_Update1, 12.0 up to and including 12.12 and 2025.1 up to and including 2026.2.

CVSS Score

8.8

HIGH

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack Vector
ADJACENT_NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH

Affected Products

VendorProductVersions
WatchguardFireware>= 11.0.0, < 11.12.4
WatchguardFirebox T15-
WatchguardFirebox T35-
WatchguardFirebox M295-
WatchguardFirebox M395-
WatchguardFirebox M495-
WatchguardFirebox M595-
WatchguardFirebox M695-
WatchguardFirebox T115-W-
WatchguardFirebox T125-
WatchguardFirebox T125-W-
WatchguardFirebox T145-
WatchguardFirebox T145-W-
WatchguardFirebox T185-
WatchguardFirebox Cloud-
WatchguardFirebox M270-
WatchguardFirebox M290-
WatchguardFirebox M370-
WatchguardFirebox M390-
WatchguardFirebox M440-

Related Weaknesses (CWE)

References

FAQ

What is CVE-2026-8247?

CVE-2026-8247 is a vulnerability with a CVSS score of 8.8 (HIGH). An Out-of-bounds Write vulnerability in WatchGuard Fireware OS may allow an unauthenticated attacker on the same local network segment to execute arbitrary code. This vulnerability affects Firewar...

How severe is CVE-2026-8247?

CVE-2026-8247 has been rated HIGH with a CVSS base score of 8.8/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2026-8247?

Check the references section above for vendor advisories and patch information. Affected products include: Watchguard Fireware, Watchguard Firebox T15, Watchguard Firebox T35, Watchguard Firebox M295, Watchguard Firebox M395.