CVE-2026-13053Disclosure(watchguard / firebox_m270)

LOWCVSS 7.2 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

Patch watchguard firebox_m270 systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

An Out-of-bounds Write vulnerability in WatchGuard Fireware OS's CLI could allow an authenticated privileged user to execute arbitrary code via a specially crafted CLI command.

watchguard CVEs Back to dashboard

1.0/ 10 priority

Sources & remediation

Vendor / third-party advisories

https://www.watchguard.com/wgrd-psirt/advisory/wgsa-2026-00030

Other references

https://psirt.watchguard.com/CVE-2026-13053

Weakness type (CWE)

CWE-787

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

firebox_m270
firebox_m290
firebox_m295
firebox_m370

Threat summary

Patch or workaround signal is available
8 mentions across 3 observed days
Momentum state: stable

What's happening

Patch or workaround mentioned in 5 signals
Technical details provided in 8 signals
Disclosure: 4 classified signals
Peaked 2d ago at 6 mentions (2026-07-03); latest day: 1
8 total mentions across 3 days

Affected systems

Vendors

watchguard

Products

firebox_m270firebox_m290firebox_m295firebox_m370firebox_m390firebox_m395firebox_m440firebox_m4600firebox_m470firebox_m4800

1 version affected across 39 products

Deep dive

Activity timeline8 mentions / 3d

Signal classification2 categories

Disclosure

450.0%

Patch

450.0%

Referenced assets6 URLs

By indicator

Classification over time

Date	Total	Labels

2026-07-03	6	Disclosure3Patch3
2026-07-10	1	Patch1
2026-08-03	1	Disclosure1

Full discourse8 posts

iototsecnews@iototsecnews84d
Patch
WatchGuard Firebox OS の脆弱性 CVE-2026-13053／13050／13054 が FIX：任意のコード実行の恐れ https://iototsecnews.jp/2026/07/03/multiple-watchguard-firebox-os-vulnerabilities-enable-arbitrary-code-execution-attacks/ ネットワークの防御を担う機器 WatchGuard Firebox の制御ソフトにおいて、ログイン後の管理画面などから不正な命令を実行されてしまう複数の高深刻度な脆弱性 CVE-2026-13053／CVE-2026-13050／CVE-2026-13054 が見つかりました。この問題の背景には、管理用のコマンド入力を処理する際のデータ検証や、ファイルの書き込み経路を制限する仕組みの不備があります。もし管理者情報の漏洩などを機に悪用されると、機器の重要なシステムファイルを書き換えられて通信制御を完全に奪われるといった甚大な被害が生じる恐れがあります。確実な対応策として、まずは稼働中の Fireware OS のバージョンを確認し、最新の修正パッチを速やかに適用してください。 #CVE202613050 #CVE202613053 #CVE202613054 #FireboxOS #Vulnerability #WatchGuard
Post summary
WatchGuard Firebox OS suffers from three high‑severity CVEs (CVE‑2026‑13053, ‑13050, ‑13054) that enable arbitrary code execution; vendors have released patches, and users are advised to update promptly.
00110143
500 followersView on X
SystemTek - Technology news website@SystemTek_UK59d
Disclosure
WatchGuard FireWare OS cli Token Parser Stack-based Buffer Overflow Remote Code Execution Vulnerability (CVE-2026-13053) https://www.systemtek.co.uk/2026/08/watchguard-fireware-os-cli-token-parser-stack-based-buffer-overflow-remote-code-execution-vulnerability-cve-2026-13053/ via @SystemTek_UK
Post summary
The tweet announces a newly identified stack‑based buffer overflow vulnerability (CVE‑2026‑13053) that leads to remote code execution in WatchGuard FireWare OS, and links to an article that likely details the exploit.
0000070
1.8K followersView on X
ADK Cyber@ADKCyber90d
Patch
WatchGuard Fireware OS CLI has high-severity CVE-2026-13053 (CVSS 8.6) allowing code execution by authenticated admins. Apply updates promptly: https://nvd.nist.gov/vuln/detail/CVE-2026-13053 via NVD Recent High CVSS #CyberSecurity #InfoSec #Vulnerability #AI #MachineLearning https://t.co/DoEN1gTXZE
Post summary
The tweet highlights the high‑severity CVE‑2026‑13053 in WatchGuard Fireware OS CLI, warns of code execution by authenticated admins, and urges users to apply official updates promptly.
0000062
92 followersView on X
The Daily Tech Feed@dailytechonx90d
Patch
WatchGuard's Firebox OS has critical vulnerabilities (CVE-2026-13053, CVE-2026-13050, CVE-2026-13054) allowing authenticated attackers to execute arbitrary code. Affected versions span 11.0 through 12.12 and 2025.1 through 2026.2. Immediate patching to versions 2026.2.1 or 12.12.1 is essential to secure devices. #CyberSecurity #WatchGuard #Firebox #Vulnerabilities #PatchNow #NetworkSecurity https://thedailytechfeed.com/critical-vulnerabilities-in-watchguard-firebox-os-allow-arbitrary-code-execution/
Post summary
WatchGuard’s Firebox OS suffers from three critical CVEs that allow authenticated attackers to run arbitrary code; the advisory stresses immediate patching to the specified secure releases.
0000056
470 followersView on X
Upwind Security MDR@UpwindMDR91d
Disclosure
🚨 HIGH - WatchGuard Fireware OS CLI out-of-bounds write leading to code execution (CVE-2026-13053) CVE-2026-13053 is an out-of-bounds write in the WatchGuard Fireware OS command-line interface (CLI) that impacts multiple Fireware release trains. The root cause is a memory corruption flaw (out-of-bounds write) triggered by improper bounds checking while handling crafted CLI input. An attacker must have authenticated, privileged CLI access and can exploit it by issuing a specially crafted command that overwrites memory in the CLI process. If exploited, this can lead to arbitrary code execution on the appliance, enabling full device compromise, configuration tampering, and potential pivoting into internal networks. 👉 Affected: WatchGuard Fireware OS 11.0–11.12.4_Update1, 12.0–12.12, 2025.1–2026.2 | Upgrade to a vendor-fixed release beyond these versions (no fixed version specified — treat as suspicious until confirmed)
Post summary
The post details a new out‑of‑bounds write vulnerability (CVE‑2026‑13053) in WatchGuard Fireware OS CLI, recommends upgrading to a patched release, and provides technical specifics but no PoC or evidence of active exploitation.
0000083
236 followersView on X
TECHEPAGES@techepages91d
Patch
🔥 Multiple WatchGuard Firebox OS vulnerabilities enable arbitrary code execution attacks 🔹 3 high-severity flaws (CVE-2026-13053, -13050, -13054), all scored 8.6 CVSS v4.0 🔹 Authenticated attackers can run arbitrary code & write files via CLI and Web UI 🔹 Affects hardware, virtual & cloud Fireboxes — Fireware 11.0 through 2026.2 🔹 No workarounds — update to 2026.2.1 / 12.12.1 & lock down management access
Post summary
The notice highlights three high‑severity CVEs in WatchGuard Firebox OS, offering no workarounds other than applying the latest updates and tightening management access.
0000046
23 followersView on X
Infoflowcloud@infoflowcloud91d
Disclosure
🚨*CVE* CVE-2026-13053 An Out-of-bounds Write vulnerability in WatchGuard Fireware OS's CLI could allow an authenticated privileged user to execute arbitrary code via a specially crafted CL… https://www.cve.org/CVERecord?id=CVE-2026-13053 ----- Traducción: CVE-2026-13053 Un … http://infoflow.cloud`
Post summary
The tweet announces CVE-2026-13053, describing an out‑of‑bounds write in WatchGuard Fireware OS's CLI that could allow authenticated privileged users to execute arbitrary code.
0000040
91 followersView on X
CVE@CVEnew91d
Disclosure
CVE-2026-13053 An Out-of-bounds Write vulnerability in WatchGuard Fireware OS's CLI could allow an authenticated privileged user to execute arbitrary code via a specially crafted CL… https://www.cve.org/CVERecord?id=CVE-2026-13053
Post summary
The CVE describes an out‑of‑bounds write in WatchGuard Fireware OS’s CLI that permits an authenticated privileged user to execute arbitrary code via a specially crafted command.
00000704
57.7K followersView on X

CPE platform detail39 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

39 of 39 entries

Part	Vendor	Product	Version	Target SW	Target HW
HW	watchguard	firebox_m270	-	-	-
HW	watchguard	firebox_m290	-	-	-
HW	watchguard	firebox_m295	-	-	-
HW	watchguard	firebox_m370	-	-	-
HW	watchguard	firebox_m390	-	-	-
HW	watchguard	firebox_m395	-	-	-
HW	watchguard	firebox_m440	-	-	-
HW	watchguard	firebox_m4600	-	-	-
HW	watchguard	firebox_m470	-	-	-
HW	watchguard	firebox_m4800	-	-	-
HW	watchguard	firebox_m495	-	-	-
HW	watchguard	firebox_m5600	-	-	-
HW	watchguard	firebox_m570	-	-	-
HW	watchguard	firebox_m5800	-	-	-
HW	watchguard	firebox_m590	-	-	-
HW	watchguard	firebox_m595	-	-	-
HW	watchguard	firebox_m670	-	-	-
HW	watchguard	firebox_m690	-	-	-
HW	watchguard	firebox_m695	-	-	-
HW	watchguard	firebox_nv5	-	-	-
HW	watchguard	firebox_t115-w	-	-	-
HW	watchguard	firebox_t125	-	-	-
HW	watchguard	firebox_t125-w	-	-	-
HW	watchguard	firebox_t145	-	-	-
HW	watchguard	firebox_t145-w	-	-	-
HW	watchguard	firebox_t15	-	-	-
HW	watchguard	firebox_t185	-	-	-
HW	watchguard	firebox_t20	-	-	-
HW	watchguard	firebox_t25	-	-	-
HW	watchguard	firebox_t35	-	-	-
HW	watchguard	firebox_t40	-	-	-
HW	watchguard	firebox_t45	-	-	-
HW	watchguard	firebox_t55	-	-	-
HW	watchguard	firebox_t70	-	-	-
HW	watchguard	firebox_t80	-	-	-
HW	watchguard	firebox_t85	-	-	-
HW	watchguard	fireboxcloud	-	-	-
HW	watchguard	fireboxv	-	-	-
OS	watchguard	fireware	-	-	-

Explore more

Back to dashboard watchguard CVEs firebox_m270 vulnerabilities

What researchers are saying

CVE-2026-13053

ADK Cyber[verified]@ADKCyberPatch

The tweet highlights the high‑severity CVE‑2026‑13053 in WatchGuard Fireware OS CLI, warns of code execution by authenticated admins, and urges users to apply official updates promptly.

The Daily Tech Feed[verified]@dailytechonxPatch

WatchGuard’s Firebox OS suffers from three critical CVEs that allow authenticated attackers to run arbitrary code; the advisory stresses immediate patching to the specified secure releases.

Upwind Security MDR[verified]@UpwindMDRDisclosure

The post details a new out‑of‑bounds write vulnerability (CVE‑2026‑13053) in WatchGuard Fireware OS CLI, recommends upgrading to a patched release, and provides technical specifics but no PoC or evidence of active exploitation.

TECHEPAGES[verified]@techepagesPatch

The notice highlights three high‑severity CVEs in WatchGuard Firebox OS, offering no workarounds other than applying the latest updates and tightening management access.

iototsecnews@iototsecnewsPatch

WatchGuard Firebox OS suffers from three high‑severity CVEs (CVE‑2026‑13053, ‑13050, ‑13054) that enable arbitrary code execution; vendors have released patches, and users are advised to update promptly.

SystemTek - Technology news website@SystemTek_UKDisclosure

The tweet announces a newly identified stack‑based buffer overflow vulnerability (CVE‑2026‑13053) that leads to remote code execution in WatchGuard FireWare OS, and links to an article that likely details the exploit.

Infoflowcloud@infoflowcloudDisclosure

The tweet announces CVE-2026-13053, describing an out‑of‑bounds write in WatchGuard Fireware OS's CLI that could allow authenticated privileged users to execute arbitrary code.

CVE@CVEnewDisclosure

The CVE describes an out‑of‑bounds write in WatchGuard Fireware OS’s CLI that permits an authenticated privileged user to execute arbitrary code via a specially crafted command.