CVE-2026-93866

Status: Received

Description

An integer overflow vulnerability in the WebSocket connection handling used by WatchGuard Fireware OS's Access Portal allows a remote, unauthenticated attacker to write beyond the bounds of a heap buffer by sending a specially crafted request while the Access Portal feature is enabled.

Published
October 27, 2026 4:17 PM
Last Modified
October 27, 2026 4:17 PM
Source
5d1c2695-1a31-4499-88ae-e847036fd7e3

Weaknesses (CWE)

CWE-190 CWE-288 CWE-787

References

Contact Us

Get the CyboWatch SIEM platform, hosting, and 24×7 SOC analysts. Send an enquiry, or call or email us to get started.

Send an enquiry