CVE-2026-93866

Vulnerability Description

An integer overflow vulnerability in the WebSocket connection handling used by WatchGuard Fireware OS's Access Portal allows a remote, unauthenticated attacker to write beyond the bounds of a heap buffer by sending a specially crafted request while the Access Portal feature is enabled.

Related Weaknesses (CWE)

CWE-288 CWE-190 CWE-787

References

https://psirt.watchguard.com/CVE-2026-93866

FAQ

What is CVE-2026-93866?

CVE-2026-93866 is a documented vulnerability. An integer overflow vulnerability in the WebSocket connection handling used by WatchGuard Fireware OS's Access Portal allows a remote, unauthenticated attacker to write beyond the bounds of a heap buf...

How severe is CVE-2026-93866?

CVSS scoring is not yet available for CVE-2026-93866. Check NVD for updates.

Is there a patch for CVE-2026-93866?

Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.