{"schema":"threatline.record/2","record":{"id":"CVE-2026-90442","aliases":[],"summary":"Fireware OS Authenticated Stack Buffer Overflow in certd Allows Denial of Service","details":"A stack-based buffer overflow vulnerability in the Fireware OS certd process allows an authenticated attacker with access to the Firebox management interface to crash the certificate management service and potentially execute arbitrary code by sending a specially crafted request.","categories":["Network & edge"],"product":"Fireware OS","vendor":"WatchGuard","ecosystem":null,"affected_ranges":[{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-90442","source_modified_at":"2026-10-27T15:52:28.165Z","fetched_at":"2026-10-27T16:27:21.584480Z","product":"Fireware OS","vendor":"WatchGuard","versions":[{"status":"affected","version":"2025.1","versionType":"custom","lessThan":"2026.4"},{"status":"affected","version":"12.0","versionType":"custom","lessThan":"12.12.4"}],"defaultStatus":"unaffected"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-90442","source_modified_at":"2026-10-27T15:52:28.165Z","fetched_at":"2026-10-27T16:27:21.584480Z","product":"Fireware OS","vendor":"WatchGuard","versions":[{"status":"affected","version":"12.0","versionType":"custom","lessThan":"12.5.22"}],"defaultStatus":"unaffected"}],"fixed_versions":[{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-90442","source_modified_at":"2026-10-27T15:52:28.165Z","fetched_at":"2026-10-27T16:27:21.584480Z","package":{"name":"Fireware OS","ecosystem":null},"version":"2026.4","basis":"first unaffected version stated in the CVE record"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-90442","source_modified_at":"2026-10-27T15:52:28.165Z","fetched_at":"2026-10-27T16:27:21.584480Z","package":{"name":"Fireware OS","ecosystem":null},"version":"12.12.4","basis":"first unaffected version stated in the CVE record"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-90442","source_modified_at":"2026-10-27T15:52:28.165Z","fetched_at":"2026-10-27T16:27:21.584480Z","package":{"name":"Fireware OS","ecosystem":null},"version":"12.5.22","basis":"first unaffected version stated in the CVE record"}],"cvss":8.6,"severity":"High","kev":{"listed":false},"epss":{"probability":null,"percentile":null,"score_date":null},"published_at":"2026-10-27T15:52:28.165Z","modified_at":"2026-10-27T15:52:28.165Z","provenance":[{"source":"CVE List","url":"https://www.cve.org/CVERecord?id=CVE-2026-90442","fetched_at":"2026-10-27T16:27:21.584480Z","source_modified_at":"2026-10-27T15:52:28.165Z"}],"sources":["CVE List"],"references":[{"source":"CVE List","url":"https://psirt.watchguard.com/CVE-2026-90442","tags":["vendor-advisory"]}],"locations":[],"motoko_assessment":{"status":"requires_architecture_review","automatic_remediation":false},"cve_state":"PUBLISHED","cvss_source":"CVE List","classification":{"method":"product-first software-layer rules","rules_version":"2.1","matched_on":"vendor and product","confidence":"heuristic","reviewed":false},"change_timestamp":"2026-10-27T15:52:28.165Z","content_hash":"9cd27cf6731c1b7c44fce8f2a999622f0dce7fca5d1748bd71f732a09ca2869c"}}