CVE-2026-13050 WatchGuard CVE debrief

Who should care

Users of WatchGuard Fireware OS 11.8 up to and including 11.12.4_Update1, 12.0 up to and including 12.12 and 2025.1 up to and including 2026.2 should apply vendor remediation. This includes operators, administrators, and security teams responsible for managing and securing WatchGuard Fireware OS deployments.

Technical summary

The vulnerability affects WatchGuard Fireware OS versions 11.8 up to and including 11.12.4_Update1, 12.0 up to and including 12.12 and 2025.1 up to and including 2026.2. The CVSS score is 8.6 with a HIGH severity. The vulnerability is an Out-of-bounds Write vulnerability in WatchGuard Fireware OS networkd process. An authenticated privileged user could execute arbitrary code via specially crafted requests to the Management Web UI.

Defensive priority

High priority due to HIGH CVSS severity and potential for arbitrary code execution.

Recommended defensive actions

• Apply vendor remediation as soon as possible
• Inventory and verify affected systems
• Monitor for suspicious activity
• Implement compensating controls
• Exception tracking and retest
• Review relevant monitoring, detection, and logs for exposed assets that need extra review
• Track exceptions, retest remediated assets, and close the item only after evidence is documented

Evidence notes

Evidence is based on official CVE and NVD records, as well as a source reference from WatchGuard. However, details are limited, and further verification is recommended. The vulnerability has a HIGH CVSS severity and potential for arbitrary code execution. Users should verify affected systems and apply vendor remediation as soon as possible.

Official resources