CVE-2026-18105

Summary

An uncontrolled resource consumption vulnerability in Fireware OS's diagnostic tasks feature allows a low-privileged, authenticated user to cause a denial of service of the system's diagnostic tools by repeatedly starting and aborting a specially crafted diagnostic task through the web UI.

Affected Software

VendorProductVersion RangeStatus
WatchGuardFireware OS2026.3 < 2026.3.2affected
WatchGuardFireware OS2025.0 < 2026.2.3affected
WatchGuardFireware OS12.0 < 12.12.3affected
WatchGuardFireware OS12.0 < 12.5.21affected

Weaknesses

  • CWE-400: CWE-400
  • CWE-770: CWE-770

References