CVE-2026-86131

critical · 9.2

A code injection vulnerability in WatchGuard Fireware OS's BOVPN Over TLS client configuration handling allows an attacker who controls the remote VPN server to execute arbitrary commands as root on the connecting Firebox.

9.2

CVSS

0.3%

EPSS (exploit prob.)

24th

EPSS percentile

2026-09-30

Published

CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Weaknesses

CWE-94CWE-295CWE-829

References

https://psirt.watchguard.com/CVE-2026-86131

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2026-86131