CVE-2026-13050Disclosure(watchguard / firebox_cloud)

LOWCVSS 7.2 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

Patch watchguard firebox_cloud systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

An Out-of-bounds Write vulnerability in WatchGuard Fireware OS networkd process could allow an authenticated privileged user to execute arbitrary code via a specially crafted requests to the Management Web UI.

watchguard CVEs Back to dashboard

1.0/ 10 priority

Sources & remediation

Vendor / third-party advisories

https://www.watchguard.com/wgrd-psirt/advisory/wgsa-2026-00029

Other references

https://psirt.watchguard.com/CVE-2026-13050

Weakness type (CWE)

CWE-787

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

firebox_cloud
firebox_m270
firebox_m290
firebox_m295

Threat summary

Patch or workaround signal is available
6 mentions across 3 observed days
Momentum state: stable

What's happening

Patch or workaround mentioned in 3 signals
Technical details provided in 5 signals
Disclosure: 3 classified signals
General: 1 classified signal
Peaked 2d ago at 4 mentions (2026-07-03); latest day: 1
6 total mentions across 3 days

Affected systems

Vendors

watchguard

Products

firebox_cloudfirebox_m270firebox_m290firebox_m295firebox_m370firebox_m390firebox_m395firebox_m440firebox_m4600firebox_m470

2 versions affected across 39 products

Deep dive

Activity timeline6 mentions / 3d

Signal classification3 categories

Disclosure

350.0%

Patch

233.3%

General

116.7%

Referenced assets5 URLs

By indicator

Classification over time

Date	Total	Labels

2026-07-03	4	Disclosure2Patch2
2026-07-10	1	Disclosure1
2026-07-15	1	General1

Full discourse6 posts

iototsecnews@iototsecnews83d
Disclosure
WatchGuard Firebox OS の脆弱性 CVE-2026-13053／13050／13054 が FIX：任意のコード実行の恐れ https://iototsecnews.jp/2026/07/03/multiple-watchguard-firebox-os-vulnerabilities-enable-arbitrary-code-execution-attacks/ ネットワークの防御を担う機器 WatchGuard Firebox の制御ソフトにおいて、ログイン後の管理画面などから不正な命令を実行されてしまう複数の高深刻度な脆弱性 CVE-2026-13053／CVE-2026-13050／CVE-2026-13054 が見つかりました。この問題の背景には、管理用のコマンド入力を処理する際のデータ検証や、ファイルの書き込み経路を制限する仕組みの不備があります。もし管理者情報の漏洩などを機に悪用されると、機器の重要なシステムファイルを書き換えられて通信制御を完全に奪われるといった甚大な被害が生じる恐れがあります。確実な対応策として、まずは稼働中の Fireware OS のバージョンを確認し、最新の修正パッチを速やかに適用してください。 #CVE202613050 #CVE202613053 #CVE202613054 #FireboxOS #Vulnerability #WatchGuard
Post summary
Multiple high‑severity WatchGuard Firebox OS vulnerabilities (CVE‑2026‑13053/13050/13054) have been discovered, enabling arbitrary code execution. Patches are available and urge immediate deployment.
00110143
500 followersView on X
CERT-PY@CERTpy78d
General
⚠️ Vulnerabilidades en productos WatchGuard ❗ CVE-2026-13368 ❗ CVE-2026-13084 ❗ CVE-2026-13050 ➡️ Más info: https://www.cert.gov.py/vulnerabilidades-en-productos-watchguard-5/ https://t.co/18T6zx1S9J
Post summary
The post lists three CVE identifiers linked to WatchGuard products, but provides no additional context, technical details, or indications of exploitation or mitigation.
00000194
6.7K followersView on X
ADK Cyber@ADKCyber90d
Patch
WatchGuard Fireware OS contains CVE-2026-13050 (CVSS 8.6): out-of-bounds write in networkd allowing code execution by privileged users. Review and patch affected appliances. via NVD Recent High CVSS #CyberSecurity #InfoSec #Vulnerability #AI #MachineLearning https://t.co/VJ5ssvLWY9
Post summary
The tweet announces a CVE affecting WatchGuard Fireware OS and urges users to review and apply patches due to an out‑of‑bounds write that allows code execution for privileged users.
0000057
92 followersView on X
The Daily Tech Feed@dailytechonx90d
Patch
WatchGuard's Firebox OS has critical vulnerabilities (CVE-2026-13053, CVE-2026-13050, CVE-2026-13054) allowing authenticated attackers to execute arbitrary code. Affected versions span 11.0 through 12.12 and 2025.1 through 2026.2. Immediate patching to versions 2026.2.1 or 12.12.1 is essential to secure devices. #CyberSecurity #WatchGuard #Firebox #Vulnerabilities #PatchNow #NetworkSecurity https://thedailytechfeed.com/critical-vulnerabilities-in-watchguard-firebox-os-allow-arbitrary-code-execution/
Post summary
The post reports three critical WatchGuard Firebox OS CVEs that enable authenticated remote code execution, urging users to immediately upgrade to the patched versions 2026.2.1 or 12.12.1.
0000056
470 followersView on X
Infoflowcloud@infoflowcloud91d
Disclosure
🚨*CVE* CVE-2026-13050 An Out-of-bounds Write vulnerability in WatchGuard Fireware OS networkd process could allow an authenticated privileged user to execute arbitrary code via a specially… https://www.cve.org/CVERecord?id=CVE-2026-13050 ----- Traducción: CVE-2026-13050 Una… http://infoflow.cloud`
Post summary
The post discloses CVE-2026-13050, describing an out-of-bounds write vulnerability in WatchGuard Fireware OS that could allow privileged users to execute arbitrary code; no PoC, exploit, patch, or active exploitation is referenced.
0000042
91 followersView on X
CVE@CVEnew91d
Disclosure
CVE-2026-13050 An Out-of-bounds Write vulnerability in WatchGuard Fireware OS networkd process could allow an authenticated privileged user to execute arbitrary code via a specially… https://www.cve.org/CVERecord?id=CVE-2026-13050
Post summary
The snippet announces CVE-2026-13050, describing an out-of-bounds write that permits authenticated privileged users to run arbitrary code on WatchGuard Fireware OS, but provides no PoC, exploit, or patch details.
00000703
57.7K followersView on X

CPE platform detail41 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

41 of 41 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	watchguard	firebox_cloud	-	-	-
HW	watchguard	firebox_m270	-	-	-
HW	watchguard	firebox_m290	-	-	-
HW	watchguard	firebox_m295	-	-	-
HW	watchguard	firebox_m370	-	-	-
HW	watchguard	firebox_m390	-	-	-
HW	watchguard	firebox_m395	-	-	-
HW	watchguard	firebox_m440	-	-	-
HW	watchguard	firebox_m4600	-	-	-
HW	watchguard	firebox_m470	-	-	-
HW	watchguard	firebox_m4800	-	-	-
HW	watchguard	firebox_m495	-	-	-
HW	watchguard	firebox_m5600	-	-	-
HW	watchguard	firebox_m570	-	-	-
HW	watchguard	firebox_m5800	-	-	-
HW	watchguard	firebox_m590	-	-	-
HW	watchguard	firebox_m595	-	-	-
HW	watchguard	firebox_m670	-	-	-
HW	watchguard	firebox_m690	-	-	-
HW	watchguard	firebox_m695	-	-	-
HW	watchguard	firebox_nv5	-	-	-
HW	watchguard	firebox_t115-w	-	-	-
HW	watchguard	firebox_t125	-	-	-
HW	watchguard	firebox_t125-w	-	-	-
HW	watchguard	firebox_t145	-	-	-
HW	watchguard	firebox_t145-w	-	-	-
HW	watchguard	firebox_t15	-	-	-
HW	watchguard	firebox_t185	-	-	-
HW	watchguard	firebox_t20	-	-	-
HW	watchguard	firebox_t25	-	-	-
HW	watchguard	firebox_t35	-	-	-
HW	watchguard	firebox_t40	-	-	-
HW	watchguard	firebox_t45	-	-	-
HW	watchguard	firebox_t55	-	-	-
HW	watchguard	firebox_t70	-	-	-
HW	watchguard	firebox_t80	-	-	-
HW	watchguard	firebox_t85	-	-	-
HW	watchguard	fireboxv	-	-	-
OS	watchguard	fireware	-	-	-
OS	watchguard	fireware	11.12.4	-	-
OS	watchguard	fireware	11.12.4	-	-

Explore more

Back to dashboard watchguard CVEs firebox_cloud vulnerabilities

What researchers are saying

CVE-2026-13050

ADK Cyber[verified]@ADKCyberPatch

The tweet announces a CVE affecting WatchGuard Fireware OS and urges users to review and apply patches due to an out‑of‑bounds write that allows code execution for privileged users.

The Daily Tech Feed[verified]@dailytechonxPatch

The post reports three critical WatchGuard Firebox OS CVEs that enable authenticated remote code execution, urging users to immediately upgrade to the patched versions 2026.2.1 or 12.12.1.

iototsecnews@iototsecnewsDisclosure

Multiple high‑severity WatchGuard Firebox OS vulnerabilities (CVE‑2026‑13053/13050/13054) have been discovered, enabling arbitrary code execution. Patches are available and urge immediate deployment.

CERT-PY@CERTpyGeneral

The post lists three CVE identifiers linked to WatchGuard products, but provides no additional context, technical details, or indications of exploitation or mitigation.

Infoflowcloud@infoflowcloudDisclosure

The post discloses CVE-2026-13050, describing an out-of-bounds write vulnerability in WatchGuard Fireware OS that could allow privileged users to execute arbitrary code; no PoC, exploit, patch, or active exploitation is referenced.

CVE@CVEnewDisclosure

The snippet announces CVE-2026-13050, describing an out-of-bounds write that permits authenticated privileged users to run arbitrary code on WatchGuard Fireware OS, but provides no PoC, exploit, or patch details.