[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2026-13086":6},{"stargazers_count":4,"fetched_at":5},7,"2026-08-27T23:51:06.732Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":182,"aliases":183,"duplicate_of":9,"upstream":184,"downstream":185,"duplicates":186,"related":187,"reserved_at":9,"published_at":188,"modified_at":188,"state":189,"summary":190,"references_raw":197,"kevs":204,"epss":9,"epss_history":205,"metrics":206,"affected":213},"CVE-2026-13086","A stack-based buffer overflow in the epm (Endpoint Protection Manager) service used by the deprecated Mobile Security feature in WatchGuard Fireware OS allows an unauthenticated remote attacker to execute arbitrary code.",null,[11,20,26],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":18,"capec":19},"CWE-121","Stack-based Buffer Overflow","A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function).","weakness","Draft","Variant","High",[],{"_key":21,"id":21,"name":22,"description":23,"type":15,"status":16,"abstraction":24,"likelihood_of_exploit":18,"capec":25},"CWE-787","Out-of-bounds Write","The product writes data past the end, or before the beginning, of the intended buffer.","Base",[],{"_key":27,"id":27,"name":28,"description":29,"type":15,"status":16,"abstraction":24,"likelihood_of_exploit":18,"capec":30},"CWE-798","Use of Hard-coded Credentials","The product contains hard-coded credentials, such as a password or cryptographic key.",[31,129],{"id":32,"name":33,"techniques":34},"CAPEC-191","Read Sensitive Constants Within an Executable",[35],{"id":36,"name":37,"tactics":38,"countermeasures":42},"T1552.001","Credentials In Files",[39],{"id":40,"name":41},"TA0031","Credential Access",[43,48,53,57,62,66,71,75,79,83,87,91,95,100,105,109,113,117,121,125],{"id":44,"name":45,"tactic":46},"D3-FA","File Analysis",{"name":47},"Detect",{"id":49,"name":50,"tactic":51},"D3-FE","File Encryption",{"name":52},"Harden",{"id":54,"name":55,"tactic":56},"D3-FIM","File Integrity Monitoring",{"name":47},{"id":58,"name":59,"tactic":60},"D3-ANCI","Authentication Cache Invalidation",{"name":61},"Evict",{"id":63,"name":64,"tactic":65},"D3-CH","Credential Hardening",{"name":52},{"id":67,"name":68,"tactic":69},"D3-CF","Content Filtering",{"name":70},"Isolate",{"id":72,"name":73,"tactic":74},"D3-LFP","Local File Permissions",{"name":70},{"id":76,"name":77,"tactic":78},"D3-RFAM","Remote File Access Mediation",{"name":70},{"id":80,"name":81,"tactic":82},"D3-CQ","Content Quarantine",{"name":70},{"id":84,"name":85,"tactic":86},"D3-CM","Content Modification",{"name":70},{"id":88,"name":89,"tactic":90},"D3-FEV","File Eviction",{"name":61},{"id":92,"name":93,"tactic":94},"D3-CTS","Credential Transmission Scoping",{"name":70},{"id":96,"name":97,"tactic":98},"D3-DF","Decoy File",{"name":99},"Deceive",{"id":101,"name":102,"tactic":103},"D3-RIC","Reissue Credential",{"name":104},"Restore",{"id":106,"name":107,"tactic":108},"D3-DUC","Decoy User Credential",{"name":99},{"id":110,"name":111,"tactic":112},"D3-RF","Restore File",{"name":104},{"id":114,"name":115,"tactic":116},"D3-CCSA","Credential Compromise Scope Analysis",{"name":47},{"id":118,"name":119,"tactic":120},"D3-CR","Credential Revocation",{"name":61},{"id":122,"name":123,"tactic":124},"D3-CRO","Credential Rotation",{"name":52},{"id":126,"name":127,"tactic":128},"D3-MFA","Multi-factor Authentication",{"name":52},{"id":130,"name":131,"techniques":132},"CAPEC-70","Try Common or Default Usernames and Passwords",[133],{"id":134,"name":135,"tactics":136,"countermeasures":152},"T1078.001","Default Accounts",[137,140,143,146,149],{"id":138,"name":139},"TA0030","Defense Evasion",{"id":141,"name":142},"TA0005","Stealth",{"id":144,"name":145},"TA0110","Persistence",{"id":147,"name":148},"TA0111","Privilege Escalation",{"id":150,"name":151},"TA0108","Initial Access",[153,158,162,166,170,174,178],{"id":154,"name":155,"tactic":156},"D3-AM","Access Modeling",{"name":157},"Model",{"id":159,"name":160,"tactic":161},"D3-AL","Account Locking",{"name":61},{"id":163,"name":164,"tactic":165},"D3-AA","Agent Authentication",{"name":52},{"id":167,"name":168,"tactic":169},"D3-CDP","Change Default Password",{"name":52},{"id":171,"name":172,"tactic":173},"D3-ULA","Unlock Account",{"name":104},{"id":175,"name":176,"tactic":177},"D3-RUAA","Restore User Account Access",{"name":104},{"id":179,"name":180,"tactic":181},"D3-UAP","User Account Permissions",{"name":70},[],[],[],[],[],[],"2026-08-27T23:24:32.779Z","Received",{"cisa_kev":191,"cisa_ransomware":191,"cisa_vendor":9,"epss_severity":9,"epss_score":9,"severity":192,"severity_score":193,"severity_version":194,"severity_source":195,"severity_vector":196,"severity_status":189},false,"critical",9.3,"v4.0","cve.org","CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",[198],{"url":199,"sources":200,"tags":202},"https://psirt.watchguard.com/CVE-2026-13086",[195,201],"nvd",[203],"Vendor Advisory",[],[],[207,210],{"source":195,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":9,"cvss_v4_0":208},{"baseScore":193,"baseSeverity":209,"vectorString":196,"impactScore":9,"exploitabilityScore":9},"CRITICAL",{"source":201,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":9,"cvss_v4_0":211},{"baseScore":193,"baseSeverity":209,"vectorString":212,"impactScore":9,"exploitabilityScore":9},"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",[214],{"ecosystem":9,"name":215,"vendor":216,"product":217,"cpe_part":218,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":219},"Fireware OS","watchguard","fireware os","a",[220,227,231],{"version":221,"is_range":222,"range_type":195,"version_start":223,"version_start_type":224,"version_end":225,"version_end_type":226,"fixed_in":9},">= 2025.0, \u003C 2026.2.2",true,"2025.0","including","2026.2.2","excluding",{"version":228,"is_range":222,"range_type":195,"version_start":229,"version_start_type":224,"version_end":230,"version_end_type":226,"fixed_in":9},">= 12.0, \u003C 12.12.2","12.0","12.12.2",{"version":232,"is_range":222,"range_type":195,"version_start":229,"version_start_type":224,"version_end":233,"version_end_type":226,"fixed_in":9},">= 12.0, \u003C 12.5.20","12.5.20"]