{"schema":"threatline.record/2","record":{"id":"CVE-2026-18145","aliases":[],"summary":"Fireware OS Stack-based Buffer Overflow in spamd Allows Remote Code Execution","details":"A stack-based buffer overflow vulnerability in the spamBlocker (spamd) service of WatchGuard Fireware OS allows an authenticated attacker with administrator privileges to crash the service or potentially execute arbitrary code by sending a specially crafted management request.","categories":["Network & edge"],"product":"Fireware OS","vendor":"WatchGuard","ecosystem":null,"affected_ranges":[{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-18145","source_modified_at":"2026-10-01T03:55:40.898Z","fetched_at":"2026-10-23T18:52:38.922436Z","product":"Fireware OS","vendor":"WatchGuard","versions":[{"status":"affected","version":"2026.3","versionType":"custom","lessThan":"2026.3.2"},{"status":"affected","version":"2025.0","versionType":"custom","lessThan":"2026.2.3"},{"status":"affected","version":"12.0","versionType":"custom","lessThan":"12.12.3"}],"defaultStatus":"unaffected"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-18145","source_modified_at":"2026-10-01T03:55:40.898Z","fetched_at":"2026-10-23T18:52:38.922436Z","product":"Fireware OS","vendor":"WatchGuard","versions":[{"status":"affected","version":"12.0","versionType":"custom","lessThan":"12.5.21"}],"defaultStatus":"unaffected"}],"fixed_versions":[{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-18145","source_modified_at":"2026-10-01T03:55:40.898Z","fetched_at":"2026-10-23T18:52:38.922436Z","package":{"name":"Fireware OS","ecosystem":null},"version":"2026.3.2","basis":"first unaffected version stated in the CVE record"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-18145","source_modified_at":"2026-10-01T03:55:40.898Z","fetched_at":"2026-10-23T18:52:38.922436Z","package":{"name":"Fireware OS","ecosystem":null},"version":"2026.2.3","basis":"first unaffected version stated in the CVE record"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-18145","source_modified_at":"2026-10-01T03:55:40.898Z","fetched_at":"2026-10-23T18:52:38.922436Z","package":{"name":"Fireware OS","ecosystem":null},"version":"12.12.3","basis":"first unaffected version stated in the CVE record"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-18145","source_modified_at":"2026-10-01T03:55:40.898Z","fetched_at":"2026-10-23T18:52:38.922436Z","package":{"name":"Fireware OS","ecosystem":null},"version":"12.5.21","basis":"first unaffected version stated in the CVE record"}],"cvss":8.6,"severity":"High","kev":{"listed":false},"epss":{"probability":0.00389,"percentile":0.31863,"score_date":"2026-10-23"},"published_at":"2026-09-29T23:05:47.947Z","modified_at":"2026-10-01T03:55:40.898Z","provenance":[{"source":"CVE List","url":"https://www.cve.org/CVERecord?id=CVE-2026-18145","fetched_at":"2026-10-23T18:52:38.922436Z","source_modified_at":"2026-10-01T03:55:40.898Z"},{"source":"EPSS","url":"https://api.first.org/data/v1/epss?cve=CVE-2026-18145","fetched_at":"2026-10-23T18:42:43.628194Z","source_modified_at":"2026-10-23"}],"sources":["CVE List","EPSS"],"references":[{"source":"CVE List","url":"https://psirt.watchguard.com/CVE-2026-18145","tags":["vendor-advisory"]}],"locations":[],"motoko_assessment":{"status":"requires_architecture_review","automatic_remediation":false},"cve_state":"PUBLISHED","cvss_source":"CVE List","ssvc":{"exploitation":"none","automatable":"no","technical_impact":"total","assessed_at":"2026-09-30T00:00:00+00:00"},"classification":{"method":"product-first software-layer rules","rules_version":"2.1","matched_on":"vendor and product","confidence":"heuristic","reviewed":false},"change_timestamp":"2026-10-01T03:55:40.898Z","content_hash":"c5d41ebd43fd2d9691e425a5160feb56889d6cb2104239f98a55695e0f7f5cb0"}}