Approved changes feed: RSS · Atom

cpe:2.3:a:watchguard:fireware_os:*:*:*:*:*:*:*:12.1

part: a version: * update: *

VendorWatchguard (ec468727-86da-5bb0-9483-b62749e25478)
ProductFireware Os (61450564-b43a-5239-8e0b-ad6e851d5a0d)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other12.1
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-13728 vulnerable 2026-07-29 00:23:33.245432 WatchGuard Firebox Hardcoded Fallback Encryption Key in Access Portal Resource Credential Database
In exception circumstances, WatchGuard Fireware OS on a FireCluster may use a hard-coded encryption key to encrypt saved credentials for Access Portal resources. This vulnerability affects Fireware OS 12.1 up to and including 12.12 and 2025.1 up to and including 2026.2. This vulnerability does not affect devices that do not support the Access Portal feature or standalone Fireboxes not deployed in a FireCluster.
Published: 2026-07-02T23:07:01.203Z
Updated: 2026-07-06T14:56:01.465Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-13384 vulnerable 2026-07-29 00:23:33.009524 WatchGuard Firebox wgagent Out of Bounds Write Vulnerability
An Out-of-bounds Write vulnerability in WatchGuard Fireware OS wgagent process could allow an authenticated privileged user to execute arbitrary code via a specially crafted requests to the Management Web UI.This vulnerability affects Fireware OS 12.1 up to and including 12.12 and 2025.1 up to and including 2026.2.
Published: 2026-07-02T23:05:59.971Z
Updated: 2026-07-07T03:56:37.194Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-13383 vulnerable 2026-07-29 00:23:33.009134 WatchGuard Firebox ikestubd Out of Bounds Write Vulnerability
An Out-of-bounds Write vulnerability in WatchGuard Fireware OS ikestubd process could allow an authenticated privileged user to execute arbitrary code via a specially crafted requests to the Management Web UI.This vulnerability affects Fireware OS 12.1 up to and including 12.12 and 2025.1 up to and including 2026.2.
Published: 2026-07-02T23:05:53.872Z
Updated: 2026-07-07T03:56:38.252Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-4266 vulnerable 2026-06-08 08:05:13.102897 WatchGuard Firebox Insecure Deserialization in Fireware Access Portal
An Insecure Deserialization vulnerability in WatchGuard Fireware OS allows an attacker that has obtained write access to the local filesystem through another vulnerability to execute arbitrary code in the context of the portald user.This issue affects Fireware OS: 12.1 through 12.11.8 and 2025.1 through 2026.1.2. Note, this vulnerability does not affect Firebox platforms that do not support the Access Portal feature, including the T-15 and T-35.
Published: 2026-03-30T12:38:01.593Z
Updated: 2026-03-31T03:55:35.825Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.