CVE-2026-90442

CVSS 8.6 (high) · published 2026-10-27

A stack-based buffer overflow vulnerability in the Fireware OS certd process allows an authenticated attacker with access to the Firebox management interface to crash the certificate management service and potentially execute arbitrary code by sending a specially crafted request.

Weakness: CWE-121, CWE-787

Source: NVD CVE-2026-90442

References

Check your software

Connect an AI agent to the FixLane MCP server or ask the Telegram bot to check what you have installed against incidents with a verified fixed version.