CVE-2026-18145
published 2026-09-30CVE-2026-18145: A stack-based buffer overflow vulnerability in the spamBlocker (spamd) service of WatchGuard Fireware OS allows an authenticated attacker with administrator…
PriorityP354high8.6CVSS 4.0
AVNACLATNPRHUINVCHVIHVAHSCNSINSANEXCRXIRXARXMAVXMACXMATXMPRXMUIXMVCXMVIXMVAXMSCXMSIXMSAXSXAUXRXVXREXUX
EPSS
0.34%
25.5th percentile
A stack-based buffer overflow vulnerability in the spamBlocker (spamd) service of WatchGuard Fireware OS allows an authenticated attacker with administrator privileges to crash the service or potentially execute arbitrary code by sending a specially crafted management request.
Affected
4 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| watchguard | fireware_os | >= 12.0 < 12.12.3 | 12.12.3 |
| watchguard | fireware_os | >= 12.0 < 12.5.21 | 12.5.21 |
| watchguard | fireware_os | >= 2025.0 < 2026.2.3 | 2026.2.3 |
| watchguard | fireware_os | >= 2026.3 < 2026.3.2 | 2026.3.2 |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
VulDB
WatchGuard Fireware OS spamd buffer overflow
vuldb·2026-09-30·CVSS 8.6
CVE-2026-18145 [HIGH] WatchGuard Fireware OS spamd buffer overflow
A vulnerability described as very critical has been identified in WatchGuard Fireware OS. The impacted element is an unknown function of the component spamd. Such manipulation leads to buffer overflow.
This vulnerability is documented as CVE-2026-18145. The attack can be executed remotely. There is not any exploit available.
GHSA
A stack-based buffer overflow vulnerability in the spamBlocker (spamd) service of WatchGuard Fireware OS allows an authenticated attacker with administrator privileges to crash the service or potentia
ghsa_unreviewed·2026-09-30
CVE-2026-18145 [HIGH] CWE-121 A stack-based buffer overflow vulnerability in the spamBlocker (spamd) service of WatchGuard Fireware OS allows an authenticated attacker with administrator privileges to crash the service or potentia
A stack-based buffer overflow vulnerability in the spamBlocker (spamd) service of WatchGuard Fireware OS allows an authenticated attacker with administrator privileges to crash the service or potentially execute arbitrary code by sending a specially crafted management request.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2026-09-30
Published