← Database

CVE-2026-93866

N/A CVSS: N/A Published: 2026-10-27 Modified: 2026-10-27

Description

An integer overflow vulnerability in the WebSocket connection handling used by WatchGuard Fireware OS's Access Portal allows a remote, unauthenticated attacker to write beyond the bounds of a heap buffer by sending a specially crafted request while the Access Portal feature is enabled.

Affected Platforms

Unknown

Weakness Type

CWE-190, CWE-288, CWE-787

References