{"id":"CVE-2026-111107","aliases":[],"title":"Fireware OS NULL Pointer Dereference in Management Interface Allows Unauthenticated Denial of Service","description":"A NULL pointer dereference vulnerability in WatchGuard Fireware OS’s management interface allows a remote, unauthenticated attacker with network access to the management interface to crash the management service by sending a specially crafted login request. Repeated exploitation terminates all active administrator sessions and in-progress management operations and can prevent management of the device. Traffic processing is not affected.","severity":"high","score":8.7,"published":"2026-10-27T15:52:27.690Z","modified":"2026-10-27T15:52:27.690Z","withdrawn":false,"knownExploited":false,"affected":[],"references":["https://psirt.watchguard.com/CVE-2026-111107"],"sources":[{"name":"CVE","id":"CVE-2026-111107","modified":"2026-10-27T15:52:27.690Z","url":"https://www.cve.org/CVERecord?id=CVE-2026-111107"}],"assessments":[{"source":"CNA","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","score":8.7}]}