CVE-2026-8247

HIGH
MEDIUM Priority: 0.03 BB Relevance: 60/100
Published: 2026-07-03 Modified: 2026-10-25 First seen: 2026-10-29 Status: active

Attack Surface

Adjacent Low Complexity No Auth No Interaction Conf. Impact Integ. Impact

CVSS Vector Breakdown

AV: Adjacent
AC: Low
PR: None
UI: None
S: X
AT: Present
VC: High
VI: High
VA: High

Description

An Out-of-bounds Write vulnerability in WatchGuard Fireware OS may allow an unauthenticated attacker on the same local network segment to execute arbitrary code. This vulnerability affects Fireware OS 11.0 up to and including 11.12.4_Update1, 12.0 up to and including 12.12 and 2025.1 up to and including 2026.2.

Weakness Classification (2)

Affected Software (6)

VendorProductVersion
watchguard fireware 11.0.0 – 11.12.4
watchguard fireware 11.12.4
watchguard fireware 11.12.4
watchguard fireware 12.5 – 12.5.19
watchguard fireware 2025.1 – 2026.2.1
watchguard fireware 12.0 – 12.12.1

Bug Bounty Relevance

60 / 100
✓ No authentication
✓ Low complexity
✓ No user interaction

CVSS Score

7.7 / 10.0 v4.0
CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

EPSS — Exploitation Probability

0.38%
Raw Score 0.003830
Percentile 32.3%
Date 2026-10-29

EPSS Trend

2026-10-29
0.00383
2026-10-28
0.00383

Intelligence Sources

nvd ref →