CVE-2026-86131Vulnerability
Reported by 4 independent sources · first reported by INCIBE-CERT · last reported
Last reported 19 days ago
higher than 35% of CVEsFIRST EPSS, as of 23 Oct 2026
What the reports say
4 reports, newest first · the exact sentence from each-
⚡ Weekly Recap: NetScaler and FortiMail 0-Days, AI Coding Leaks, Spectre v2 and Ransomware Arrests“…e), CVE-2026-86553, CVE-2026-86555, CVE-2026-86552, CVE-2026-86554 (ZTE SmartLife), CVE-2026-101891, CVE-2026-87969, CVE-2026-86102, CVE-2026-86131 (WatchGuard), GHSA-cpc9-c4h3-2jwx (geoserver/geoserver-cloud), CVE-2026-93302, CVE-2026-89102 (WolfSSL), CVE-2026-84782 (OpenSSL), C…”
-
WatchGuard fixes critical Fireware OS flaw allowing remote code execution“… has released security updates for Fireware OS that address 15 vulnerabilities, including a critical code injection flaw, tracked as CVE-2026-86131 (CVSS score of 9.2), that could allow an attacker to execute commands with root privileges on a vulnerable Firebox.”
-
WatchGuard Patches Critical Fireware OS Code Injection Vulnerability“Tracked as CVE-2026-86131 (CVSS score of 9.2), the flaw is described as a code injection issue in how the operating system handles BOVPN over TLS client configurations.”
-
Múltiples vulnerabilidades en WatchGuard AP de WatchGuard“CVE-2026-86131: vulnerabilidad de inyección de código en el tratamiento de la configuración del cliente BOVPN sobre TLS de WatchGuard Fireware OS.”
Indicators reported together
named in the same reportsAlso named with it: CVE-2026-101891, CVE-2026-86102, CVE-2026-81963, CVE-2026-81578, CVE-2026-82078, CVE-2026-73581, CVE-2026-75973, CVE-2026-76183, CVE-2026-77791, CVE-2026-78383, CVE-2026-78437, CVE-2026-79677, CVE-2026-86248, CVE-2026-86350, CVE-2026-87022, CVE-2026-76708, CVE-2026-76709, CVE-2026-76710, CVE-2026-91765, CVE-2026-89078
Thanks — we review every report.