medium4.9
CVE-2026-13371
An authenticated administrator can trigger a denial-of-service condition in the Fireware Management Web UI by sending malformed or crafted data to the put_data…
Impact
An authenticated administrator can trigger a denial-of-service condition in the Fireware Management Web UI by sending malformed or crafted data to the put_data endpoint, which performs unsafe deserialization of the attacker-supplied input.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Watchguard | Fireware | from 2025.1 before 2026.2.1 from 12.5 before 12.5.19 from 12.0 before 12.12.1 |