GHSA-3mfr-hwvw-chvqHigh

A NULL pointer dereference vulnerability in WatchGuard Fireware OS’s management interface allows...

Published
October 27, 2026
Last Modified
October 27, 2026

🔗 CVE IDs covered (1)

📋 Description

A NULL pointer dereference vulnerability in WatchGuard Fireware OS’s management interface allows a remote, unauthenticated attacker with network access to the management interface to crash the management service by sending a specially crafted login request. Repeated exploitation terminates all active administrator sessions and in-progress management operations and can prevent management of the device. Traffic processing is not affected.

🔗 References (3)