{"vulnerability": "cve-2026-86131", "sightings": [{"uuid": "3751a40d-ed3b-4d12-9f18-dcc2b814c45e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86131", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117357400806892577", "content": "CVE-2026-86131: CRITICAL code injection in WatchGuard Fireware OS BOVPN Over TLS. Attackers controlling a VPN server can execute root commands on Firebox devices. Avoid untrusted VPNs until patched. https://radar.offseq.com/threat/a-code-injection-vulnerability-in-watchguard-fireware-oss-bovpn-over-tls-client-configuration-handling-678dbd9b2069781f #OffSeq #WatchGuard #FirewareOS #Vuln", "creation_timestamp": "2026-09-30T01:30:24.498651Z"}, {"uuid": "406036ed-b0d6-4ee2-88c1-408ab621d36e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86131", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mwp6z7eeza24", "content": "WatchGuard Fireware OS hit by CRITICAL code injection (CVE-2026-86131). Attackers with VPN server control can gain root on Firebox devices. Avoid connecting to untrusted VPNs until a fix. \ud83d\udd12 https://radar.offseq.com/threat/a-code-injection-vulnerability-in-watchguard-fireware-oss-bovpn-over-tls-cl...", "creation_timestamp": "2026-09-30T01:30:26.938109Z"}, {"uuid": "04f1bafe-6b99-44ed-bd8c-1e91cd940dfe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86131", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mwpb55zbls2u", "content": "\ud83d\udea8 CVE-2026-86131 \u2014 CVSS 9.2 CRITICAL\n\nA code injection vulnerability in WatchGuard Fireware OS's BOVPN Over TLS client configuration handling all...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-86131\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-30T02:08:26.555488Z"}, {"uuid": "be68d736-c899-43a8-88e1-b1c4356cda4e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86131", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mwpcuzobtf2c", "content": "WatchGuard patched 14 Fireware OS vulnerabilities, including CVSS 9.2 RCE flaw CVE-2026-86131 in BOVPN Over TLS. Update Firebox appliances now.\n\n#WatchGuard #FirewareOS #Firebox #CVE202686131 #FirewallSecurity #VPN #NetworkSecurity #PatchNow", "creation_timestamp": "2026-09-30T02:39:41.386570Z"}, {"uuid": "477207f8-55a9-4b23-a417-7fafed9a1b12", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86131", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/117358019514104109", "content": "Another one from Watch Guard.\n\nA code injection vulnerability in WatchGuard Fireware OS's BOVPN Over TLS client configuration handling allows an attacker who controls the remote VPN server to execute arbitrary commands as root on the connecting Firebox.\nhttps://psirt.watchguard.com/CVE-2026-86131", "creation_timestamp": "2026-09-30T04:07:46.279402Z"}]}