TL;DR WatchGuard disclosed 14 Fireware OS vulnerabilities on September 29, 2026, affecting its Firebox firewalls. The worst, CVE-2026-86131, scores CVSS 9.2 and allows remote code execution in certain VPN setups. Fixed releases include Fireware OS 2026.3.2, 2026.2.3, 12.12.3, and 12.5.21. Why These Fireware OS Vulnerabilities Matter Firebox appliances guard the network edge and terminate VPN connections for many businesses. Edge devices are a favorite target, because a single foothold can open the whole network.