CVE-2026-86104
Received Received - Intake

Uncontrolled Resource Consumption in Fireware OS Login Process

Publication date: 2026-09-30

Last updated on: 2026-09-30

Assigner: WatchGuard Technologies, Inc.

Description
An uncontrolled resource consumption vulnerability in the Fireware OS login process (wgagent) allows a remote, unauthenticated attacker to cause a denial of service by sending a specially crafted request.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-30
Last Modified
2026-09-30
Generated
2026-09-30
AI Q&A
2026-09-30
EPSS Evaluated
N/A
NVD
CVE-2026-86104
EUVD
EUVD-2026-89501

Affected Vendors & Products

Showing 4 associated CPEs
Vendor Product Version / Range
watchguard fireware_os From 2026.3 (inc) to 2026.3.2 (inc)
watchguard fireware_os From 2025.0 (inc) to 2026.2.3 (inc)
watchguard fireware_os From 12.0 (inc) to 12.12.3 (inc)
watchguard fireware_os From 12.0 (inc) to 12.5.21 (inc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-409 The product does not handle or incorrectly handles a compressed input with a very high compression ratio that produces a large output.
CWE-400 The product does not properly control the allocation and maintenance of a limited resource.
CWE-770 The product allocates a reusable resource or group of resources on behalf of an actor without imposing any intended restrictions on the size or number of resources that can be allocated.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This is an uncontrolled resource consumption vulnerability in Fireware OS's login process (wgagent). A remote attacker can cause a denial of service by sending a specially crafted request without authentication.

Detection Guidance

Monitor for unusual network traffic targeting the Fireware OS login process (wgagent). Check for repeated failed login attempts or sudden spikes in resource usage on affected systems. Inspect logs for malformed requests or excessive data submissions to login endpoints.

Impact Analysis

It can lead to system unavailability by consuming excessive resources, causing legitimate users to be unable to access the system. This may result in service disruptions for networks using affected Fireware OS versions.

Compliance Impact

This vulnerability could impact compliance with GDPR and HIPAA by causing service disruptions through denial of service attacks. GDPR requires organizations to ensure availability of systems, while HIPAA mandates reliable access to protected health information. Downtime from exploitation may violate these requirements.

Mitigation Strategies
  • Upgrade Fireware OS to the latest patched versions (2026.3.2, 2026.2.3, 12.12.3, or 12.5.21) immediately.
  • Restrict network access to the wgagent login process if possible, limiting exposure to trusted sources only.
  • Implement rate limiting or throttling on login endpoints to prevent resource exhaustion attacks.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-86104. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart