CVE-2026-13086 — Fireware OS Stack-Based Buffer Overflow in Mobile Security epm Endpoint

CVE-2026-13086

Fireware OS Stack-Based Buffer Overflow in Mobile Security epm Endpoint PUBLISHED

Description (CNA)

A stack-based buffer overflow in the epm (Endpoint Protection Manager) service used by the deprecated Mobile Security feature in WatchGuard Fireware OS allows an unauthenticated remote attacker to execute arbitrary code.

Affected (CNA)

Vendor / product	Versions
WatchGuard / Fireware OS	affected 2025.0 before 2026.2.2; affected 12.0 before 12.12.2; affected 2026.3 before 2026.3.1
WatchGuard / Fireware OS	affected 12.0 before 12.5.20

CWE

CWE-121, CWE-787, CWE-798

References

https://psirt.watchguard.com/CVE-2026-13086

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.