WatchGuard has announced the release of vital patches to address over twenty vulnerabilities, including five that are deemed critical. These critical flaws could potentially allow remote code execution (RCE) and unauthorized account access.
Critical Vulnerabilities in Fireware OS
Three severe vulnerabilities within the Fireware OS, specifically impacting the iked process, were identified. The iked process is integral to the Internet Key Exchange (IKE) daemon, managing cryptographic key setups and handling IPsec VPN protocols IKEv1 and IKEv2. The identified vulnerabilities include a heap buffer overflow (CVE-2026-19313), a stack-based buffer overflow (CVE-2026-19318), and a type confusion flaw (CVE-2026-19315).
Exploiting these vulnerabilities does not require authentication, making them particularly dangerous. Attackers could send crafted network packets to trigger these flaws, leading to remote code execution, as highlighted by WatchGuard.
Additional Critical Patches
In addition to the iked process vulnerabilities, WatchGuard also addressed a critical stack-based buffer overflow issue (CVE-2026-13086) in the Endpoint Protection Manager (epm) service. This service is linked to the outdated Mobile Security feature in Fireware OS, which, if exploited, could result in RCE.
Furthermore, a flaw identified as CVE-2026-78174 in WatchGuard Dimension was patched. This vulnerability could enable low-privileged administrators to extract a super admin’s session ID and CSRF tokens, potentially leading to account takeovers.
Security Updates and Future Outlook
All five critical vulnerabilities have been assigned a CVSS score of 9.3, reflecting their severity. The necessary patches are included in Fireware OS versions 2026.2.2, 12.12.2, and 12.5.20, as well as Dimension version 2.3.1.
Beyond these critical updates, WatchGuard resolved seven high-severity vulnerabilities that could cause denial-of-service (DoS) attacks. These include six issues affecting the iked process and five high-severity bugs in Dimension that could lead to arbitrary command execution and other risks.
WatchGuard has also released fixes for 11 medium-severity vulnerabilities, with one impacting the iked process of Fireware OS and ten within Dimension. Currently, there are no reports of these vulnerabilities being actively exploited. For more information, users are encouraged to visit WatchGuard’s security advisories page.
