CVE-2026-18145

UNKNOWN

Description

A stack-based buffer overflow vulnerability in the spamBlocker (spamd) service of WatchGuard Fireware OS allows an authenticated attacker with administrator privileges to crash the service or potentially execute arbitrary code by sending a specially crafted management request.

Timeline

Published:September 30th, 2026 12:16 AM

Last modified:October 1st, 2026 4:18 AM

CVSS Scoring

No CVSS v3 score available

Weaknesses (CWE)

CWE-121

References & Reports

Advisories, patches, and third-party reports

https://psirt.watchguard.com/CVE-2026-18145

Source: NIST NVD · Data may lag official sources by up to one minute