WatchGuard released security updates for Fireware OS to fix a critical bug that could let a hostile VPN server take over a connecting Firebox appliance. The main issue, CVE-2026-86131, is a code-injection flaw in BOVPN over TLS client configuration handling that can lead to root-level remote code execution. Fixes are in Fireware OS 2026.3.2, 2026.2.3, 12.12.3, and 12.5.21; 14 other flaws were also patched, including high-severity bugs tied to remote code execution, authorization bypass, denial of service, unauthorized SSLVPN access, and arbitrary local file reads.
Why it matters: Organizations using WatchGuard Firebox appliances should update quickly because several of these flaws can be exploited remotely and some do not require authentication. Even though WatchGuard says it has no evidence of active exploitation, this is edge security infrastructure and compromise could expose the wider network.
Ionut Arghire
2026.09.30
100% relevant
This article appears to be the first tracked item in this dataset focused on WatchGuard's September 2026 Fireware OS patch release and the specific critical flaw CVE-2026-86131.
← Back to all stories