CVE-2026-81433

A stack-based buffer overflow vulnerability in WatchGuard Fireware OS's DHCP fingerprinting daemon (fingerd) allows an unauthenticated attacker with adjacent network access to execute arbitrary code or crash the process by sending a specially crafted DHCP packet.

  • Published Sep 30, 2026
  • CVSS 8.7 high
  • 0.2% chance of exploitation in the next 30 days (EPSS)

Affected software

CVE-2026-81433 at the National Vulnerability Database