CVE-2026-86134

UNKNOWN

Description

A NULL pointer dereference vulnerability in the WatchGuard Fireware OS authentication process allows a remote, unauthenticated attacker to crash the management daemon by sending a specially request to the login interface, resulting in a denial of service.

Timeline

Published:September 30th, 2026 4:18 AM

Last modified:September 30th, 2026 4:40 PM

CVSS Scoring

No CVSS v3 score available

Weaknesses (CWE)

CWE-476

References & Reports

Advisories, patches, and third-party reports

https://psirt.watchguard.com/CVE-2026-86134

Source: NIST NVD · Data may lag official sources by up to one minute