VULNERABILITY INTELLIGENCE
CVE-2026-13086
CVSS score9.3 CRITICAL
EPSS probability0.66%
CISA KEVNot currently listed
Published2026-08-28
Last modified2026-09-03
CVSS vectorCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description
A stack-based buffer overflow in the epm (Endpoint Protection Manager) service used by the deprecated Mobile Security feature in WatchGuard Fireware OS allows an unauthenticated remote attacker to execute arbitrary code.
Weakness classification
- CWE-121: Stack-based Buffer Overflow
- CWE-787: Out-of-bounds Write
- CWE-798: Use of Hard-coded Credentials