{"id":"CVE-2026-93866","published":"2026-10-27T16:17:33.013","lastModified":"2026-10-27T16:17:33.013","description":"An integer overflow vulnerability in the WebSocket connection handling used by WatchGuard Fireware OS's Access Portal allows a remote, unauthenticated attacker to write beyond the bounds of a heap buffer by sending a specially crafted request while the Access Portal feature is enabled.","cvssScore":null,"cvssSeverity":null,"cvssVector":null,"cwes":["CWE-190","CWE-288","CWE-787"],"vendors":[],"products":[],"references":[{"url":"https://psirt.watchguard.com/CVE-2026-93866","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":null}