CVE-2025-12026

EUVD-2025-201307
An Out-of-bounds Write vulnerability in WatchGuard Fireware OS’s certificate request command could allow an authenticated privileged user to execute arbitrary code via specially crafted CLI commands.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.2 HIGH
NETWORK
LOW
HIGH
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 36.91%
Affected Products (NVD)
VendorProductVersion
watchguardfireware
2025.1 ≤
𝑥
< 2025.1.3
watchguardfireware
12.0.0 ≤
𝑥
< 12.11.5
watchguardfireware
12.5 ≤
𝑥
< 12.5.14
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://psirt.watchguard.com/CVE-2025-12026
https://www.watchguard.com/wgrd-psirt/advisory/wgsa-2025-00017