Fireware OS NULL Pointer Dereference in NetFlow IPv6 Traffic Processing Allows Remote Denial of Service

Why this deserves its current priority

CVSS is 8.2. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.

Affected scope and exposure questions

The current feed maps WatchGuard/Fireware OS (generic), WatchGuard/Fireware OS (generic). Check affected ranges and fixed versions before updating.

Recommended response

1. 1Check inventory. Check lockfiles and deployed manifests for WatchGuard/Fireware OS, WatchGuard/Fireware OS.
2. 2Review the reported fix. Source-reported solution: Fireware OS 2026.3.2, Fireware OS 2026.2.3, Fireware OS 12.12.3, Fireware OS 12.5.21

Evidence timeline and material changes

1. Published upstream

   Sep 29, 2026

   Evidence: source:cvelist:source_dates:source-dates:record

2. Source modified

   Sep 29, 2026

   Evidence: source:cvelist:source_dates:source-dates:record

3. First seen by HOL

   Sep 29, 2026

Sources and claim methodology

• Source referencepsirt.watchguard.com

Related CVEs

• Fireware OS Deserialization of Untrusted Data in samld Allows Remote Code ExecutionSame watchguard/fireware os package
• Fireware OS Path Traversal in WebUI Management Agent Allows Arbitrary Local File ReadSame watchguard/fireware os package
• Fireware OS Uncontrolled Resource Consumption in Diagnostic Tasks Allows Denial of ServiceSame watchguard/fireware os package
• Fireware OS Stack-based Buffer Overflow in spamd Allows Remote Code ExecutionSame watchguard/fireware os package
• Fireware OS Pre-Authentication Stack Buffer Overflow in fingerd Allows Remote Code ExecutionSame watchguard/fireware os package
• Fireware OS Authorization Bypass in SAML Login Allows Unauthorized SSLVPN AccessSame watchguard/fireware os package