An uncontrolled resource consumption flaw exists in the Fireware OS login process, known as wgagent, that allows a remote, unauthenticated attacker to send a specially crafted request. The request forces the service to allocate excessive resources, which can exhaust system resources and cause the process to become unresponsive or crash, thereby denying legitimate users access to the firewall while not compromising confidentiality or integrity.

WatchGuard Fireware OS is affected on all releases prior to Fireware OS 2026.3.2, 2026.2.3, 12.12.3, and 12.5.21. Devices running earlier versions are considered vulnerable and require an update.

The CVSS score of 8.7 classifies this issue as high severity. EPSS data is not available and the vulnerability is not listed in the CISA KEV catalog, so the exact exploitation probability is uncertain. Nevertheless, the flaw permits remote, unauthenticated exploitation and can be performed from outside the protected network, making the denial of service readily actionable.