Critical severityNVD Advisory· Published Aug 28, 2026· Updated Sep 3, 2026
CVE-2026-13086
CVE-2026-13086
Description
A stack-based buffer overflow in the epm (Endpoint Protection Manager) service used by the deprecated Mobile Security feature in WatchGuard Fireware OS allows an unauthenticated remote attacker to execute arbitrary code.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2Patches
Vulnerability mechanics
References
1News mentions
3- ZDI-26-632: WatchGuard FireWare OS epm connect Stack-based Buffer Overflow Remote Code Execution VulnerabilityZero Day Initiative · Sep 9, 2026
- ⚡ Weekly Recap: Chrome 0-Day, Router Hijacks, Coder Supply Chain Attack and MoreThe Hacker News · Sep 7, 2026
- WatchGuard Patches Critical VulnerabilitiesSecurityWeek · Sep 1, 2026