CVE-2026-19316 - Vulnerability Details - OpenCVE

A double-free vulnerability in the WatchGuard Fireware OS iked process allows a remote unauthenticated attacker to create a Denial of Service (DoS) condition in VPN processing by sending specially crafted network traffic.

Attack Vector Network

Attack Complexity Low

Privileges Required None

Attack Requirements None

User Interaction None

Vulnerable System Confidentiality Impact None

Vulnerable System Integrity Impact None

Vulnerable System Availability Impact High

Subsequent System Confidentiality Impact None

Subsequent System Integrity Impact None

Subsequent System Availability Impact None

No CVSS v3.1

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable yes

Technical Impact partial

Vendors	Products
Watchguard	Fireware Os

No data.

No data.

References

Link	Providers
https://psirt.watchguard.com/CVE-2026-19316

History

Fri, 28 Aug 2026 17:30:00 +0000

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Thu, 27 Aug 2026 18:00:00 +0000

Type	Values Removed	Values Added
Description		A double-free vulnerability in the WatchGuard Fireware OS iked process allows a remote unauthenticated attacker to create a Denial of Service (DoS) condition in VPN processing by sending specially crafted network traffic.
Title		Fireware OS Pre-Authentication Double Free in iked Allows Denial of Service (DoS)
First Time appeared		Watchguard Watchguard fireware Os
Weaknesses		CWE-415 CWE-416
CPEs		cpe:2.3:a:watchguard:fireware_os::::::::
Vendors & Products		Watchguard Watchguard fireware Os
References		https://psirt.watchguard.com/CVE-2026-19316
Metrics		cvssV4_0 `{'score': 8.7, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N'}`

MITRE

Status: PUBLISHED

Assigner: WatchGuard

Published: 2026-08-27T23:24:32.683Z

Updated: 2026-09-03T20:49:55.779Z

Reserved: 2026-08-07T20:05:58.083Z

Link: CVE-2026-19316

Vulnrichment

Updated: 2026-08-28T14:42:18.741Z

NVD

Status : Deferred

Published: 2026-08-28T02:16:20.827

Modified: 2026-09-03T21:17:21.033

Link: CVE-2026-19316

Redhat

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-19316", "assignerOrgId": "5d1c2695-1a31-4499-88ae-e847036fd7e3", "state": "PUBLISHED", "assignerShortName": "WatchGuard", "dateReserved": "2026-08-07T20:05:58.083Z", "datePublished": "2026-08-27T23:24:32.683Z", "dateUpdated": "2026-09-03T20:49:55.779Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "5d1c2695-1a31-4499-88ae-e847036fd7e3", "shortName": "WatchGuard", "dateUpdated": "2026-09-03T20:49:55.779Z"}, "title": "Fireware OS Pre-Authentication Double Free in iked Allows Denial of Service (DoS)", "descriptions": [{"lang": "en", "value": "A double-free vulnerability in the WatchGuard Fireware OS iked process allows a remote unauthenticated attacker to create a Denial of Service (DoS) condition in VPN processing by sending specially crafted network traffic."}], "affected": [{"vendor": "WatchGuard", "product": "Fireware OS", "versions": [{"status": "affected", "version": "2025.0", "versionType": "custom", "lessThan": "2026.2.2"}, {"status": "affected", "version": "12.0", "versionType": "custom", "lessThan": "12.12.2"}, {"status": "affected", "version": "2026.3", "versionType": "custom", "lessThan": "2026.3.1"}], "defaultStatus": "unaffected", "platforms": ["Default"]}, {"vendor": "WatchGuard", "product": "Fireware OS", "versions": [{"status": "affected", "version": "12.0", "versionType": "custom", "lessThan": "12.5.20"}], "defaultStatus": "unaffected", "platforms": ["T15/T35"]}], "references": [{"url": "https://psirt.watchguard.com/CVE-2026-19316", "tags": ["vendor-advisory"]}], "cpeApplicability": [{"operator": "OR", "nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:a:watchguard:fireware_os:*:*:*:*:*:*:*:*", "versionStartIncluding": "12.0", "versionEndExcluding": "12.5.20"}, {"vulnerable": true, "criteria": "cpe:2.3:a:watchguard:fireware_os:*:*:*:*:*:*:*:*", "versionStartIncluding": "2025.0", "versionEndExcluding": "2026.2.2"}, {"vulnerable": true, "criteria": "cpe:2.3:a:watchguard:fireware_os:*:*:*:*:*:*:*:*", "versionStartIncluding": "12.0", "versionEndExcluding": "12.12.2"}, {"vulnerable": true, "criteria": "cpe:2.3:a:watchguard:fireware_os:*:*:*:*:*:*:*:*", "versionStartIncluding": "2026.3", "versionEndExcluding": "2026.3.1"}]}]}], "metrics": [{"cvssV4_0": {"version": "4.0", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N", "baseScore": 8.7, "baseSeverity": "HIGH"}}], "problemTypes": [{"descriptions": [{"lang": "en", "description": "CWE-415", "type": "CWE", "cweId": "CWE-415"}, {"lang": "en", "description": "CWE-416", "type": "CWE", "cweId": "CWE-416"}]}], "credits": [{"lang": "en", "value": "McCaulay Hudson (@_McCaulay) of watchTowr", "type": "finder"}], "configurations": [{"lang": "en", "value": "This vulnerability is exploitable on systems where the Mobile VPN with IKEv2 or a Branch Office VPN with IKEv2 is configured.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "<p>This vulnerability is exploitable on systems where the Mobile VPN with IKEv2 or a Branch Office VPN with IKEv2 is configured.</p>"}]}], "solutions": [{"lang": "en", "value": "Fireware OS 2026.3.1, Fireware OS 2026.2.2, Fireware OS 12.12.2, Fireware OS 12.5.20", "supportingMedia": [{"type": "text/html", "base64": false, "value": "<p>Fireware OS 2026.3.1, Fireware OS 2026.2.2, Fireware OS 12.12.2, Fireware OS 12.5.20</p>"}]}], "exploits": [{"lang": "en", "value": "WatchGuard is not aware of any exploitation of this vulnerability in the wild.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "WatchGuard is not aware of any exploitation of this vulnerability in the wild."}]}], "timeline": [{"time": "2026-09-03T00:00:00.000Z", "lang": "en", "value": "Added Fireware OS 2026.3.1 as a fixed version"}], "datePublic": "2026-08-27T23:24:37.498Z"}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-08-28T14:42:17.705583Z", "id": "CVE-2026-19316", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-08-28T15:57:13.629Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-19316", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-08-28T14:42:17.705583Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-08-28T14:42:18.741Z"}}], "cna": {"title": "Fireware OS Pre-Authentication Double Free in iked Allows Denial of Service (DoS)", "credits": [{"lang": "en", "type": "finder", "value": "McCaulay Hudson (@_McCaulay) of watchTowr"}], "metrics": [{"cvssV4_0": {"version": "4.0", "baseScore": 8.7, "baseSeverity": "HIGH", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N"}}], "affected": [{"vendor": "WatchGuard", "product": "Fireware OS", "versions": [{"status": "affected", "version": "2025.0", "lessThan": "2026.2.2", "versionType": "custom"}, {"status": "affected", "version": "12.0", "lessThan": "12.12.2", "versionType": "custom"}, {"status": "affected", "version": "2026.3", "lessThan": "2026.3.1", "versionType": "custom"}], "platforms": ["Default"], "defaultStatus": "unaffected"}, {"vendor": "WatchGuard", "product": "Fireware OS", "versions": [{"status": "affected", "version": "12.0", "lessThan": "12.5.20", "versionType": "custom"}], "platforms": ["T15/T35"], "defaultStatus": "unaffected"}], "exploits": [{"lang": "en", "value": "WatchGuard is not aware of any exploitation of this vulnerability in the wild.", "supportingMedia": [{"type": "text/html", "value": "WatchGuard is not aware of any exploitation of this vulnerability in the wild.", "base64": false}]}], "timeline": [{"lang": "en", "time": "2026-09-03T00:00:00.000Z", "value": "Added Fireware OS 2026.3.1 as a fixed version"}], "solutions": [{"lang": "en", "value": "Fireware OS 2026.3.1, Fireware OS 2026.2.2, Fireware OS 12.12.2, Fireware OS 12.5.20", "supportingMedia": [{"type": "text/html", "value": "<p>Fireware OS 2026.3.1, Fireware OS 2026.2.2, Fireware OS 12.12.2, Fireware OS 12.5.20</p>", "base64": false}]}], "datePublic": "2026-08-27T23:24:37.498Z", "references": [{"url": "https://psirt.watchguard.com/CVE-2026-19316", "tags": ["vendor-advisory"]}], "descriptions": [{"lang": "en", "value": "A double-free vulnerability in the WatchGuard Fireware OS iked process allows a remote unauthenticated attacker to create a Denial of Service (DoS) condition in VPN processing by sending specially crafted network traffic."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-415", "description": "CWE-415"}, {"lang": "en", "type": "CWE", "cweId": "CWE-416", "description": "CWE-416"}]}], "configurations": [{"lang": "en", "value": "This vulnerability is exploitable on systems where the Mobile VPN with IKEv2 or a Branch Office VPN with IKEv2 is configured.", "supportingMedia": [{"type": "text/html", "value": "<p>This vulnerability is exploitable on systems where the Mobile VPN with IKEv2 or a Branch Office VPN with IKEv2 is configured.</p>", "base64": false}]}], "cpeApplicability": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:watchguard:fireware_os:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "12.5.20", "versionStartIncluding": "12.0"}, {"criteria": "cpe:2.3:a:watchguard:fireware_os:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "2026.2.2", "versionStartIncluding": "2025.0"}, {"criteria": "cpe:2.3:a:watchguard:fireware_os:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "12.12.2", "versionStartIncluding": "12.0"}, {"criteria": "cpe:2.3:a:watchguard:fireware_os:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "2026.3.1", "versionStartIncluding": "2026.3"}], "operator": "OR"}], "operator": "OR"}], "providerMetadata": {"orgId": "5d1c2695-1a31-4499-88ae-e847036fd7e3", "shortName": "WatchGuard", "dateUpdated": "2026-09-03T20:49:55.779Z"}}}, "cveMetadata": {"cveId": "CVE-2026-19316", "state": "PUBLISHED", "dateUpdated": "2026-09-03T20:49:55.779Z", "dateReserved": "2026-08-07T20:05:58.083Z", "assignerOrgId": "5d1c2695-1a31-4499-88ae-e847036fd7e3", "datePublished": "2026-08-27T23:24:32.683Z", "assignerShortName": "WatchGuard"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "platforms": ["Default"], "product": "Fireware OS", "vendor": "WatchGuard", "versions": [{"lessThan": "2026.2.2", "status": "affected", "version": "2025.0", "versionType": "custom"}, {"lessThan": "12.12.2", "status": "affected", "version": "12.0", "versionType": "custom"}, {"lessThan": "2026.3.1", "status": "affected", "version": "2026.3", "versionType": "custom"}]}, {"defaultStatus": "unaffected", "platforms": ["T15/T35"], "product": "Fireware OS", "vendor": "WatchGuard", "versions": [{"lessThan": "12.5.20", "status": "affected", "version": "12.0", "versionType": "custom"}]}], "source": "5d1c2695-1a31-4499-88ae-e847036fd7e3"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "A double-free vulnerability in the WatchGuard Fireware OS iked process allows a remote unauthenticated attacker to create a Denial of Service (DoS) condition in VPN processing by sending specially crafted network traffic."}], "id": "CVE-2026-19316", "lastModified": "2026-09-03T21:17:21.033", "metrics": {"cvssMetricV40": [{"cvssData": {"Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "Safety": "NOT_DEFINED", "attackComplexity": "LOW", "attackRequirements": "NONE", "attackVector": "NETWORK", "availabilityRequirement": "NOT_DEFINED", "baseScore": 8.7, "baseSeverity": "HIGH", "confidentialityRequirement": "NOT_DEFINED", "exploitMaturity": "NOT_DEFINED", "integrityRequirement": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "privilegesRequired": "NONE", "providerUrgency": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "subConfidentialityImpact": "NONE", "subIntegrityImpact": "NONE", "userInteraction": "NONE", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "version": "4.0", "vulnAvailabilityImpact": "HIGH", "vulnConfidentialityImpact": "NONE", "vulnIntegrityImpact": "NONE", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "source": "5d1c2695-1a31-4499-88ae-e847036fd7e3", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-19316", "options": [{"exploitation": "none"}, {"automatable": "yes"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-08-28T14:42:17.705583Z", "version": "2.0.3"}}]}, "published": "2026-08-28T02:16:20.827", "references": [{"source": "5d1c2695-1a31-4499-88ae-e847036fd7e3", "url": "https://psirt.watchguard.com/CVE-2026-19316"}], "sourceIdentifier": "5d1c2695-1a31-4499-88ae-e847036fd7e3", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-415"}, {"lang": "en", "value": "CWE-416"}], "source": "5d1c2695-1a31-4499-88ae-e847036fd7e3", "type": "Secondary"}]}