CVE-2026-111107
A NULL pointer dereference vulnerability in WatchGuard Fireware OS’s management interface allows a remote, unauthenticated attacker with net
CVSS
—
Sem CVSS
EPSS
0.4%
p29
KEV
—
Exploit Today
9
0-100
Publicado: 27 de out. de 2026 · Última mod.: 4 de nov. de 2026 · CWE-248 · CWE-476 · CWE-1286
0.4%EPSS · 30 dias0.4%
2026-10-282026-11-05
A NULL pointer dereference vulnerability in WatchGuard Fireware OS’s management interface allows a remote, unauthenticated attacker with network access to the management interface to crash the management service by sending a specially crafted login request. Repeated exploitation terminates all active administrator sessions and in-progress management operations and can prevent management of the device. Traffic processing is not affected.
CVECVSSEPSSKEVRExploitTítuloMod.
CVE-2026-69025—3.4%
——1In the Exynos NPU driver, improper validation of user input in the ioctl handler can lead to an out-of-bounds write, which causes a denial of service1dCVE-2026-48179—3.4%
——1In the Exynos modem's IMS stack, improper handling of SDP payload leads to a Denial of Service1dCVE-2026-48174—6.4%
——2In the NR RRC component, improper handling of messages before authentication triggers a data abort, which leads to a denial‑of‑service condition.1dCVE-2026-33958—4.2%
——1Processing a malformed RRC Reconfiguration message leads to an out-of-bounds (OOB) access, resulting in a denial-of-service (DoS) condition.1dCVE-2026-1223157.5 ALT34.6%
——10Kyverno before 1.19.2 contains an unchecked type assertion in buildStatementMap that allows unauthenticated attackers to crash the policy engine via crafted attestation statements. Attackers can push an OCI referrer manifest with a non-string type field to bypass image verification under failurePolicy Ignore or crash-loop the reports-controller.23hCVE-2026-1223147.5 ALT23.4%
——7Kyverno before 1.19.2 contains an unchecked type assertion in its variable-substitution engine that allows users who can submit resources to crash the policy engine. Attackers can submit resources with non-string fields referenced by {{- variable }} shallow substitution in policies, causing a panic that yields webhook denial of service and policy bypass under failurePolicy Ignore.23h