ByteOS Network

Vulnerability Details :

CVE-2026-41287

Assigner Org ID-5d1c2695-1a31-4499-88ae-e847036fd7e3

Published At-06 May, 2026 | 13:40

Updated At-06 May, 2026 | 14:49

Stack-based Buffer Overflow in WatchGuard Agent Discovery Service on Windows Causes Denial of Service - Variant A

Stack-based Buffer Overflow vulnerability in the WatchGuard Agent discovery service on Windows allows Overflow Buffers. An unauthenticated attacker on the same local network could exploit this vulnerability to crash the agent service.

EPSS History

Score

Latest Score

N/A

Percentile

Latest Percentile

N/A

▼Common Vulnerabilities and Exposures (CVE)

cve.org

Assigner:WatchGuard

Assigner Org ID:5d1c2695-1a31-4499-88ae-e847036fd7e3

Published At:06 May, 2026 | 13:40

Updated At:06 May, 2026 | 14:49

▼CVE Numbering Authority (CNA)

Stack-based Buffer Overflow in WatchGuard Agent Discovery Service on Windows Causes Denial of Service - Variant A

Affected Products

Vendor

WatchGuard Technologies, Inc.

Product

WatchGuard Agent

Platforms

Windows

Default Status

unaffected

Versions

Affected

From 0 before 1.25.03.0000 (custom)

Problem Types

Type	CWE ID	Description
CWE	CWE-121	CWE-121 Stack-based Buffer Overflow

Type: CWE

CWE ID: CWE-121

Description: CWE-121 Stack-based Buffer Overflow

Metrics

Version	Base score	Base severity	Vector
4.0	7.1	HIGH	CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

Version: 4.0

Base score: 7.1

Base severity: HIGH

Vector:

CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

Impacts

CAPEC ID	Description
CAPEC-100	CAPEC-100 Overflow Buffers

CAPEC ID: CAPEC-100

Description: CAPEC-100 Overflow Buffers

References

Hyperlink	Resource
https://www.watchguard.com/wgrd-psirt/advisory/wgsa-2026-00010	N/A

Hyperlink: https://www.watchguard.com/wgrd-psirt/advisory/wgsa-2026-00010

Resource: N/A

▼Authorized Data Publishers (ADP)

CISA ADP Vulnrichment

Metrics Other Info

▼National Vulnerability Database (NVD)

nvd.nist.gov

Source:5d1c2695-1a31-4499-88ae-e847036fd7e3

Published At:06 May, 2026 | 15:16

Updated At:11 May, 2026 | 18:36

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Secondary	4.0	7.1	HIGH	CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Primary	3.1	6.5	MEDIUM	CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Type: Secondary

Version: 4.0

Base score: 7.1

Base severity: HIGH

Vector:

CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Type: Primary

Version: 3.1

Base score: 6.5

Base severity: MEDIUM

Vector:

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CPE Matches

WatchGuard Technologies, Inc.

>>agent>>Versions before 1.25.03.0000(exclusive)

cpe:2.3:a:watchguard:agent:*:*:*:*:*:windows:*:*

Weaknesses

CWE ID	Type	Source
CWE-121	Secondary	5d1c2695-1a31-4499-88ae-e847036fd7e3

CWE ID: CWE-121

Type: Secondary

Source: 5d1c2695-1a31-4499-88ae-e847036fd7e3

References

Hyperlink	Source	Resource
https://www.watchguard.com/wgrd-psirt/advisory/wgsa-2026-00010	5d1c2695-1a31-4499-88ae-e847036fd7e3	Vendor Advisory

Hyperlink: https://www.watchguard.com/wgrd-psirt/advisory/wgsa-2026-00010

Source: 5d1c2695-1a31-4499-88ae-e847036fd7e3

Resource:

Vendor Advisory

Similar CVEs

67Records found

CVE-2024-30840

Matching Score-4

Assigner-MITRE Corporation

View Details

Matching Score-4

Assigner-MITRE Corporation

CVSS Score-6.5||MEDIUM

EPSS-0.30% / 21.52%

7 Day CHG~0.00%

Published-15 Apr, 2024 | 00:00

Updated-14 Apr, 2025 | 13:40

A Stack Overflow vulnerability in Tenda AC15 v15.03.05.18 allows attackers to cause a denial of service via the LISTEN parameter in the fromDhcpListClient function.

Vendor-n/a Tenda Technology Co., Ltd.

Product-ac15_firmware ac15 n/a ac15_firmware

CWE ID-CWE-121

Stack-based Buffer Overflow

CVE-2024-28547

Matching Score-4

Assigner-MITRE Corporation

View Details

Matching Score-4

Assigner-MITRE Corporation

CVSS Score-6.5||MEDIUM

EPSS-0.50% / 38.62%

7 Day CHG~0.00%

Published-18 Mar, 2024 | 00:00

Updated-13 Mar, 2025 | 19:47

Tenda AC18 V15.03.05.05 has a stack overflow vulnerability in the firewallEn parameter of formSetFirewallCfg function.

Vendor-n/a Tenda Technology Co., Ltd.

Product-ac18 ac18_firmware n/a ac18_firmware

CWE ID-CWE-121

Stack-based Buffer Overflow

CVE-2024-27568

Matching Score-4

Assigner-MITRE Corporation

View Details

Matching Score-4

Assigner-MITRE Corporation

CVSS Score-6.5||MEDIUM

EPSS-0.50% / 38.99%

7 Day CHG~0.00%

Published-01 Mar, 2024 | 00:00

Updated-30 Apr, 2025 | 11:25

LBT T300-T390 v2.2.1.8 were discovered to contain a stack overflow via the apn_name_3g parameter in the setupEC20Apn function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted POST request.

Vendor-libtor n/a szlbt

Product-lbt-t300-t390_firmware lbt-t300-t390 n/a lbt-t300-t390_firmware

CWE ID-CWE-121

Stack-based Buffer Overflow

CVE-2026-36777

Matching Score-4

Assigner-MITRE Corporation

View Details

Matching Score-4

Assigner-MITRE Corporation

CVSS Score-6.5||MEDIUM

EPSS-0.22% / 11.93%

7 Day CHG~0.00%

Published-09 Jun, 2026 | 00:00

Updated-10 Jun, 2026 | 18:16

Shenzhen Tenda Technology Co., Ltd Tenda W3 Wireless Router v1.0.0.3(2204) was discovered to contain a stack overflow in the param_1 parameter of the formSetCfm function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted HTTP request.

Vendor-n/a

Product-n/a

CWE ID-CWE-121

Stack-based Buffer Overflow

CVE-2024-42984

Matching Score-4

Assigner-MITRE Corporation

View Details

Matching Score-4

Assigner-MITRE Corporation

CVSS Score-6.5||MEDIUM

EPSS-0.56% / 42.02%

7 Day CHG~0.00%

Published-15 Aug, 2024 | 00:00

Updated-15 Aug, 2024 | 18:35

Tenda FH1206 v02.03.01.35 was discovered to contain a stack overflow via the page parameter in the fromP2pListFilter function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted POST request.

Vendor-n/a Tenda Technology Co., Ltd.

Product-n/a fh1206_firmware

CWE ID-CWE-121

Stack-based Buffer Overflow

CVE-2024-42953

Matching Score-4

Assigner-MITRE Corporation

View Details

Matching Score-4

Assigner-MITRE Corporation

CVSS Score-6.5||MEDIUM

EPSS-0.56% / 42.06%

7 Day CHG~0.00%

Published-15 Aug, 2024 | 00:00

Updated-16 Aug, 2024 | 18:15

Tenda FH1201 v1.2.0.14 (408) was discovered to contain a stack overflow via the PPW parameter in the fromWizardHandle function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted POST request.

Vendor-n/a Tenda Technology Co., Ltd.

Product-fh1201_firmware fh1201 n/a fh1201_firmware

CWE ID-CWE-121

Stack-based Buffer Overflow

CWE ID-CWE-787

Out-of-bounds Write

CVE-2024-42946

Matching Score-4

Assigner-MITRE Corporation

View Details

Matching Score-4

Assigner-MITRE Corporation

CVSS Score-6.5||MEDIUM

EPSS-0.69% / 47.86%

7 Day CHG~0.00%

Published-15 Aug, 2024 | 00:00

Updated-16 Aug, 2024 | 17:35

Tenda FH1201 v1.2.0.14 (408) was discovered to contain a stack overflow via the page parameter in the fromVirtualSer function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted POST request.

Vendor-n/a Tenda Technology Co., Ltd.

Product-fh1201_firmware fh1201 n/a fh1201_firmware

CWE ID-CWE-121

Stack-based Buffer Overflow

CWE ID-CWE-787

Out-of-bounds Write

CVE-2024-42983

Matching Score-4

Assigner-MITRE Corporation

View Details

Matching Score-4

Assigner-MITRE Corporation

CVSS Score-6.5||MEDIUM

EPSS-0.55% / 41.78%

7 Day CHG~0.00%

Published-15 Aug, 2024 | 00:00

Updated-15 Aug, 2024 | 18:35

Tenda FH1206 v02.03.01.35 was discovered to contain a stack overflow via the pptpPPW parameter in the fromAdvSetWan function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted POST request.

Vendor-n/a Tenda Technology Co., Ltd.

Product-n/a fh1206_firmware

CWE ID-CWE-121

Stack-based Buffer Overflow

CVE-2024-41460

Matching Score-4

Assigner-MITRE Corporation

View Details

Matching Score-4

Assigner-MITRE Corporation

CVSS Score-6.5||MEDIUM

EPSS-0.57% / 42.79%

7 Day CHG~0.00%

Published-24 Jul, 2024 | 00:00

Updated-02 Aug, 2024 | 04:46

Tenda FH1201 v1.2.0.14 was discovered to contain a stack-based buffer overflow vulnerability via the entrys parameter at ip/goform/RouteStatic.

Vendor-n/a Tenda Technology Co., Ltd.

Product-fh1201_firmware fh1201 n/a fh1201_firmware

CWE ID-CWE-121

Stack-based Buffer Overflow

CWE ID-CWE-787

Out-of-bounds Write

CVE-2025-29118

Matching Score-4

Assigner-MITRE Corporation

View Details

Matching Score-4

Assigner-MITRE Corporation

CVSS Score-6.5||MEDIUM

EPSS-0.33% / 24.46%

7 Day CHG+0.02%

Published-19 Mar, 2025 | 00:00

Updated-01 Apr, 2025 | 20:36

Tenda AC8 V16.03.34.06 was discovered to contain a stack overflow via the src parameter in the function sub_47D878.

Vendor-n/a Tenda Technology Co., Ltd.

Product-ac8 ac8_firmware n/a

CWE ID-CWE-121

Stack-based Buffer Overflow

CVE-2024-30632

Matching Score-4

Assigner-MITRE Corporation

View Details

Matching Score-4

Assigner-MITRE Corporation

CVSS Score-6.5||MEDIUM

EPSS-0.53% / 40.48%

7 Day CHG~0.00%

Published-29 Mar, 2024 | 00:00

Updated-13 Mar, 2025 | 21:26

Tenda FH1205 v2.0.0.7(775) has a stack overflow vulnerability in the security_5g parameter from formWifiBasicSet function.

Vendor-n/a Tenda Technology Co., Ltd.

Product-fh1205_firmware fh1205 n/a fh1205_firmware

CWE ID-CWE-121

Stack-based Buffer Overflow

CVE-2024-28447

Matching Score-4

Assigner-MITRE Corporation

View Details

Matching Score-4

Assigner-MITRE Corporation

CVSS Score-6.5||MEDIUM

EPSS-0.52% / 39.91%

7 Day CHG~0.00%

Published-19 Mar, 2024 | 00:00

Updated-21 Aug, 2025 | 14:32

Shenzhen Libituo Technology Co., Ltd LBT-T300-mini1 v1.2.9 was discovered to contain a buffer overflow via lan_ipaddr parameters at /apply.cgi.

Vendor-szlbt n/a szlbt

Product-lbt-t300-mini1 lbt-t300-mini1_firmware n/a lbt-t300-mini_firmware

CWE ID-CWE-121

Stack-based Buffer Overflow

CVE-2024-27569

Matching Score-4

Assigner-MITRE Corporation

View Details

Matching Score-4

Assigner-MITRE Corporation

CVSS Score-6.5||MEDIUM

EPSS-0.50% / 38.99%

7 Day CHG~0.00%

Published-01 Mar, 2024 | 00:00

Updated-30 Apr, 2025 | 11:25

LBT T300-T390 v2.2.1.8 were discovered to contain a stack overflow via the ApCliSsid parameter in the init_nvram function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted POST request.

Vendor-libtor n/a szlbt

Product-lbt-t300-t390_firmware lbt-t300-t390 n/a lbt-t300-t390_firmware

CWE ID-CWE-121

Stack-based Buffer Overflow

CVE-2025-65804

Matching Score-4

Assigner-MITRE Corporation

View Details

Matching Score-4

Assigner-MITRE Corporation

CVSS Score-6.5||MEDIUM

EPSS-0.49% / 38.34%

7 Day CHG~0.00%

Published-08 Dec, 2025 | 00:00

Updated-11 Dec, 2025 | 00:03

Tenda AX3 v16.03.12.11 contains a stack overflow in formSetIptv via the iptvType parameter, which can cause memory corruption and enable remote code execution (RCE).

Vendor-n/a Tenda Technology Co., Ltd.

Product-ax3_firmware ax3 n/a

CWE ID-CWE-121

Stack-based Buffer Overflow

CVE-2025-20794

Matching Score-4

Assigner-MediaTek, Inc.

View Details

Matching Score-4

Assigner-MediaTek, Inc.

CVSS Score-6.5||MEDIUM

EPSS-0.25% / 15.77%

7 Day CHG~0.00%

Published-06 Jan, 2026 | 01:46

Updated-30 Mar, 2026 | 13:03

In Modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01689259 / MOLY01586470; Issue ID: MSV-4847.

Vendor-MediaTek Inc.