Approved changes feed: RSS · Atom

cpe:2.3:a:watchguard:fireware_os:*:*:*:*:*:*:*:11.0

part: a version: * update: *

VendorWatchguard (ec468727-86da-5bb0-9483-b62749e25478)
ProductFireware Os (61450564-b43a-5239-8e0b-ad6e851d5a0d)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other11.0
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-8247 vulnerable 2026-07-29 01:09:05.692956 WatchGuard Firebox admd Out of Bounds Write Vulnerability
An Out-of-bounds Write vulnerability in WatchGuard Fireware OS may allow an unauthenticated attacker on the same local network segment to execute arbitrary code. This vulnerability affects Fireware OS 11.0 up to and including 11.12.4_Update1, 12.0 up to and including 12.12 and 2025.1 up to and including 2026.2.
Published: 2026-07-02T23:07:16.148Z
Updated: 2026-07-07T03:56:33.916Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-13722 vulnerable 2026-07-29 00:23:33.241197 WatchGuard Firebox Firmware Image Validation Bypass in WatchGuard Fireware OS
WatchGuard Fireware OS contains a firmware validation bypass when processing a backup image via the backup/restore feature. An authenticated administrator can exploit this vulnerability to install a tampered firmware image.This vulnerability affects Fireware OS 11.0 up to and including 11.12.4_Update1, 12.0 up to and including 12.12 and 2025.1 up to and including 2025.6.2.
Published: 2026-07-02T23:06:12.339Z
Updated: 2026-07-07T03:56:36.130Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-13368 vulnerable 2026-07-29 00:23:32.986765 WatchGuard Firebox Race Condition and Use-After-Free in Mobile VPN with IKEv2 LDAP Authentication
WatchGuard Fireware OS contains a race condition leading to a use-after-free vulnerability in LDAP authentication for the Mobile User VPN with IKEv2. A remote unauthenticated attacker could exploit this vulnerability to execute arbitrary code in the context of the iked process on Fireboxes that have a Mobile VPN with IKEv2 configured to use an external LDAP authentication server. This vulnerability affects Fireware OS 11.0 up to and including 11.12.4_Update1, 12.0 up to and including 12.12 and 2025.1 up to and including 2026.2.
Published: 2026-07-02T23:06:32.928Z
Updated: 2026-07-07T03:56:35.031Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-13054 vulnerable 2026-07-29 00:23:32.793704 WatchGuard Firebox Arbitrary File Write via Path Traversal in Management Web UI
A path traversal vulnerability in the WatchGuard Fireware OS Management Web UI allows a privileged authenticated attacker to write arbitrary files on the Firebox's filesystem. This vulnerability affects Fireware OS 11.0 up to and including 11.12.4_Update1, 12.0 up to and including 12.12 and 2025.1 up to and including 2026.2.
Published: 2026-07-02T23:07:57.548Z
Updated: 2026-07-07T03:56:23.074Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-13053 vulnerable 2026-07-29 00:23:32.793054 WatchGuard Firebox Authenticated Out of Bounds Write in Management CLI Command Handler
An Out-of-bounds Write vulnerability in WatchGuard Fireware OS's CLI could allow an authenticated privileged user to execute arbitrary code via a specially crafted CLI command. This vulnerability affects Fireware OS 11.0 up to and including 11.12.4_Update1, 12.0 up to and including 12.12 and 2025.1 up to and including 2026.2.
Published: 2026-07-02T23:08:27.642Z
Updated: 2026-07-07T03:56:17.670Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.