CVE-2026-86134— Fireware OS Pre-Authentication NULL Pointer Dereference Allows Remote Denial of Service
Quick assessment
Affected
WatchGuard Fireware OS
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
WatchGuard Fireware OS 身份验证过程中存在一个空指针解引用漏洞，允许远程未认证攻击者通过向登录接口发送特制请求来使管理守护进程崩溃，从而导致拒绝服务。
Possible ATT&CK Techniques 1 AI
T1499 · Endpoint Denial of Service
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-86134
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Fireware OS Pre-Authentication NULL Pointer Dereference Allows Remote Denial of Service
Source: CVE Program / CVE List V5
Vulnerability Description
A NULL pointer dereference vulnerability in the WatchGuard Fireware OS authentication process allows a remote, unauthenticated attacker to crash the management daemon by sending a specially request to the login interface, resulting in a denial of service.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
Source: CVE Program / CVE List V5
Vulnerability Type
空指针解引用
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| WatchGuard | Fireware OS | 2026.3 ~ 2026.3.2 | - |
|
| WatchGuard | Fireware OS | 12.0 ~ 12.5.21 | - |
|
II. Public POCs for CVE-2026-86134
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-86134
请登录查看更多情报信息。
Vendor Advisories for CVE-2026-86134 (1)
IV. Related Vulnerabilities
Same product: Fireware OS
-
CVE-2026-90441
Fireware OS Missing Authorization in wgagent Management API -
CVE-2026-18105
Fireware OS Uncontrolled Resource Consumption in Diagnostic -
CVE-2026-13046
Fireware OS Deserialization of Untrusted Data in samld Allow -
CVE-2026-18145
Fireware OS Stack-based Buffer Overflow in spamd Allows Remo -
CVE-2026-86133
Fireware OS Pre-Authentication Integer Underflow in iked All
Same vendor: WatchGuard
-
CVE-2026-18105
Fireware OS Uncontrolled Resource Consumption in Diagnostic -
CVE-2026-86133
Fireware OS Pre-Authentication Integer Underflow in iked All -
CVE-2026-90441
Fireware OS Missing Authorization in wgagent Management API -
CVE-2026-13224
Fireware OS Path Traversal in WebUI Management Agent Allows -
CVE-2026-18145
Fireware OS Stack-based Buffer Overflow in spamd Allows Remo
V. Comments for CVE-2026-86134
No comments yet