CVE-2026-13368: fireware 11.12.4; +1 more affected products

Affected technology

fireware · from 2025.1 (inclusive), before 2026.2.1 (exclusive)
watchguard

fireware · from 12.5 (inclusive), before 12.5.19 (exclusive)
watchguard

fireware · from 11.0.0 (inclusive), before 11.12.4 (exclusive)
watchguard

fireware · 11.12.4
watchguard

fireware · 11.12.4 · update u1
watchguard

fireware · from 12.0 (inclusive), before 12.12.1 (exclusive)
watchguard

Fireware OS · 2025.1 to before 2026.2.1
WatchGuard

Fireware OS · 12.0 to before 12.11.9
WatchGuard

Fireware OS · 12.0 to before 12.5.19
WatchGuard

Component: Not specified by the source

Attack conditions (Source advisory, CVSS 4.0): Network (remote) · No privileges required · No user interaction required

What an attacker can do

A remote unauthenticated attacker could exploit this vulnerability to execute arbitrary code in the context of the iked process on Fireboxes that have a Mobile VPN with IKEv2 configured to use an external LDAP authentication server. Source advisory’s CVSS 4.0 assessment (base score 9.2/10) rates confidentiality, integrity and availability impact as high.