CVE-2026-13054Patch(watchguard / firebox_m270)

LOWCVSS 7.2 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

Patch watchguard firebox_m270 systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

A path traversal vulnerability in the WatchGuard Fireware OS Management Web UI allows a privileged authenticated attacker to write arbitrary files on the Firebox's filesystem.

watchguard CVEs Back to dashboard

1.0/ 10 priority

Sources & remediation

Vendor / third-party advisories

https://www.watchguard.com/wgrd-psirt/advisory/wgsa-2026-00028

Other references

https://psirt.watchguard.com/CVE-2026-13054

Weakness type (CWE)

CWE-22

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

firebox_m270
firebox_m290
firebox_m295
firebox_m370

Threat summary

Patch or workaround signal is available
5 mentions across 2 observed days
Momentum state: stable

What's happening

Patch or workaround mentioned in 3 signals
Technical details provided in 5 signals
Disclosure: 2 classified signals
Peaked 1d ago at 4 mentions (2026-07-03); latest day: 1
5 total mentions across 2 days

Affected systems

Vendors

watchguard

Products

firebox_m270firebox_m290firebox_m295firebox_m370firebox_m390firebox_m395firebox_m440firebox_m4600firebox_m470firebox_m4800

1 version affected across 39 products

Deep dive

Activity timeline5 mentions / 2d

Signal classification2 categories

Patch

360.0%

Disclosure

240.0%

Referenced assets5 URLs

By indicator

Classification over time

Date	Total	Labels

2026-07-03	4	Disclosure2Patch2
2026-07-10	1	Patch1

Full discourse5 posts

iototsecnews@iototsecnews83d
Patch
WatchGuard Firebox OS の脆弱性 CVE-2026-13053／13050／13054 が FIX：任意のコード実行の恐れ https://iototsecnews.jp/2026/07/03/multiple-watchguard-firebox-os-vulnerabilities-enable-arbitrary-code-execution-attacks/ ネットワークの防御を担う機器 WatchGuard Firebox の制御ソフトにおいて、ログイン後の管理画面などから不正な命令を実行されてしまう複数の高深刻度な脆弱性 CVE-2026-13053／CVE-2026-13050／CVE-2026-13054 が見つかりました。この問題の背景には、管理用のコマンド入力を処理する際のデータ検証や、ファイルの書き込み経路を制限する仕組みの不備があります。もし管理者情報の漏洩などを機に悪用されると、機器の重要なシステムファイルを書き換えられて通信制御を完全に奪われるといった甚大な被害が生じる恐れがあります。確実な対応策として、まずは稼働中の Fireware OS のバージョンを確認し、最新の修正パッチを速やかに適用してください。 #CVE202613050 #CVE202613053 #CVE202613054 #FireboxOS #Vulnerability #WatchGuard
Post summary
The post reports high‑severity vulnerabilities in WatchGuard Firebox OS that allow arbitrary code execution, and urges administrators to verify versions and promptly apply vendor patches.
00110143
500 followersView on X
CVE@CVEnew91d
Disclosure
CVE-2026-13054 A path traversal vulnerability in the WatchGuard Fireware OS Management Web UI allows a privileged authenticated attacker to write arbitrary files on the Firebox's fi… https://www.cve.org/CVERecord?id=CVE-2026-13054
Post summary
The statement reports a WatchGuard Fireware OS path traversal flaw (CVE-2026-13054) that permits privileged authenticated users to write arbitrary files, but it lacks PoC, exploit, or mitigation details.
00010673
57.7K followersView on X
ADK Cyber@ADKCyber90d
Patch
CVE-2026-13054 (CVSS 8.6): Path traversal in WatchGuard Fireware OS Management Web UI lets authenticated admins write arbitrary files. Review and patch if you use this platform: https://nvd.nist.gov/vuln/deta… via NVD Recent High CVSS #CyberSecurity #InfoSec #Vulnerability https://t.co/0tnKHGfU2R
Post summary
The tweet highlights CVE‑2026‑13054, a high‑severity path‑traversal flaw in WatchGuard Fireware OS that permits authenticated administrators to write arbitrary files, urging users to review and apply vendor patches.
0000057
92 followersView on X
The Daily Tech Feed@dailytechonx90d
Patch
WatchGuard's Firebox OS has critical vulnerabilities (CVE-2026-13053, CVE-2026-13050, CVE-2026-13054) allowing authenticated attackers to execute arbitrary code. Affected versions span 11.0 through 12.12 and 2025.1 through 2026.2. Immediate patching to versions 2026.2.1 or 12.12.1 is essential to secure devices. #CyberSecurity #WatchGuard #Firebox #Vulnerabilities #PatchNow #NetworkSecurity https://thedailytechfeed.com/critical-vulnerabilities-in-watchguard-firebox-os-allow-arbitrary-code-execution/
Post summary
The tweet highlights authenticated remote code execution vulnerabilities in WatchGuard Firebox OS and urges immediate patching to specific upgraded versions.
0000056
470 followersView on X
Infoflowcloud@infoflowcloud91d
Disclosure
🚨*CVE* CVE-2026-13054 A path traversal vulnerability in the WatchGuard Fireware OS Management Web UI allows a privileged authenticated attacker to write arbitrary files on the Firebox's fi… https://www.cve.org/CVERecord?id=CVE-2026-13054 ----- Traducción: CVE-2026-13054 Una… http://infoflow.cloud`
Post summary
The post announces CVE-2026-13054, a path traversal flaw in WatchGuard Fireware OS that permits privileged authenticated users to write arbitrary files.
0000049
91 followersView on X

CPE platform detail39 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

39 of 39 entries

Part	Vendor	Product	Version	Target SW	Target HW
HW	watchguard	firebox_m270	-	-	-
HW	watchguard	firebox_m290	-	-	-
HW	watchguard	firebox_m295	-	-	-
HW	watchguard	firebox_m370	-	-	-
HW	watchguard	firebox_m390	-	-	-
HW	watchguard	firebox_m395	-	-	-
HW	watchguard	firebox_m440	-	-	-
HW	watchguard	firebox_m4600	-	-	-
HW	watchguard	firebox_m470	-	-	-
HW	watchguard	firebox_m4800	-	-	-
HW	watchguard	firebox_m495	-	-	-
HW	watchguard	firebox_m5600	-	-	-
HW	watchguard	firebox_m570	-	-	-
HW	watchguard	firebox_m5800	-	-	-
HW	watchguard	firebox_m590	-	-	-
HW	watchguard	firebox_m595	-	-	-
HW	watchguard	firebox_m670	-	-	-
HW	watchguard	firebox_m690	-	-	-
HW	watchguard	firebox_m695	-	-	-
HW	watchguard	firebox_nv5	-	-	-
HW	watchguard	firebox_t115-w	-	-	-
HW	watchguard	firebox_t125	-	-	-
HW	watchguard	firebox_t125-w	-	-	-
HW	watchguard	firebox_t145	-	-	-
HW	watchguard	firebox_t145-w	-	-	-
HW	watchguard	firebox_t15	-	-	-
HW	watchguard	firebox_t185	-	-	-
HW	watchguard	firebox_t20	-	-	-
HW	watchguard	firebox_t25	-	-	-
HW	watchguard	firebox_t35	-	-	-
HW	watchguard	firebox_t40	-	-	-
HW	watchguard	firebox_t45	-	-	-
HW	watchguard	firebox_t55	-	-	-
HW	watchguard	firebox_t70	-	-	-
HW	watchguard	firebox_t80	-	-	-
HW	watchguard	firebox_t85	-	-	-
HW	watchguard	fireboxcloud	-	-	-
HW	watchguard	fireboxv	-	-	-
OS	watchguard	fireware	-	-	-

Explore more

Back to dashboard watchguard CVEs firebox_m270 vulnerabilities

What researchers are saying

CVE-2026-13054

ADK Cyber[verified]@ADKCyberPatch

The tweet highlights CVE‑2026‑13054, a high‑severity path‑traversal flaw in WatchGuard Fireware OS that permits authenticated administrators to write arbitrary files, urging users to review and apply vendor patches.

The Daily Tech Feed[verified]@dailytechonxPatch

The tweet highlights authenticated remote code execution vulnerabilities in WatchGuard Firebox OS and urges immediate patching to specific upgraded versions.

iototsecnews@iototsecnewsPatch

The post reports high‑severity vulnerabilities in WatchGuard Firebox OS that allow arbitrary code execution, and urges administrators to verify versions and promptly apply vendor patches.

CVE@CVEnewDisclosure

The statement reports a WatchGuard Fireware OS path traversal flaw (CVE-2026-13054) that permits privileged authenticated users to write arbitrary files, but it lacks PoC, exploit, or mitigation details.

Infoflowcloud@infoflowcloudDisclosure

The post announces CVE-2026-13054, a path traversal flaw in WatchGuard Fireware OS that permits privileged authenticated users to write arbitrary files.