Technical impact
An uncontrolled resource consumption flaw in Fireware OS's diagnostic tasks feature permits a low‑privileged, authenticated user to repeatedly initiate and abort specially crafted tasks via the web UI, overloading system resources and rendering the diagnostic tools unavailable. The result is a DoS condition that disrupts the availability of vital monitoring and management functions. This weakness falls under the categories of resource exhaustion and uncontrolled resource consumption, as reflected by its CWE identifiers.
Affected Systems
The vulnerability affects the WatchGuard Fireware OS product line. Systems running any of the following releases are impacted: Fireware OS 2026.3.2, Fireware OS 2026.2.3, Fireware OS 12.12.3, and Fireware OS 12.5.21. All other versions outside of these releases are not known to be affected.
Risk and Exploitability
The CVSS score of 7.1 indicates a medium‑to‑high level of severity. While the EPSS score is not available, the exploitability relies on an authenticated user with at least low privileges who can access the web interface. The CVE is not currently listed in CISA’s KEV catalog, suggesting that active exploitation may not yet be widespread. Nevertheless, the attack vector—direct web‑UI interaction—makes the vulnerability readily actionable for any attacker who already has user credentials or can obtain them through legitimate or compromised channels.
