CVE-2026-18145 — Fireware OS Stack-based Buffer Overflow in spamd Allows Remote Code Execution

CVE-2026-18145

Fireware OS Stack-based Buffer Overflow in spamd Allows Remote Code Execution PUBLISHED

Description (CNA)

A stack-based buffer overflow vulnerability in the spamBlocker (spamd) service of WatchGuard Fireware OS allows an authenticated attacker with administrator privileges to crash the service or potentially execute arbitrary code by sending a specially crafted management request.

Affected (CNA)

Vendor / product	Versions
WatchGuard / Fireware OS	affected 2026.3 before 2026.3.2; affected 2025.0 before 2026.2.3; affected 12.0 before 12.12.3
WatchGuard / Fireware OS	affected 12.0 before 12.5.21

CWE

CWE-121

References

https://psirt.watchguard.com/CVE-2026-18145

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.