Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
An LDAP Injection vulnerability in WatchGuard Fireware OS may allow a remote unauthenticated attacker to retrieve sensitive information from a connected LDAP authentication server through an exposed authentication or management web interface. This vulnerability may also allow a remote attacker to authenticate as an LDAP user with a partial identifier if they additionally have that user's valid passphrase.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
| Date | Total | Labels |
|---|
| 2026-01-30 | 1 | Disclosure1 |
| 2026-02-04 | 1 | Disclosure1 |
| 2026-02-05 | 1 | General1 |
| 2026-02-06 | 2 | Disclosure1Patch1 |
#WatchGuard #Firebox LDAP Injection Schwachstelle #cve-2026-1498 https://borncity.com/blog/2026/02/06/watchguard-firebox-fireware-os-ldap-injection-schwachstelle-cve-2026-1498/
Post summary
The post merely links to a blog entry about an LDAP injection flaw in WatchGuard Firebox (CVE‑2026‑1498) without further exploitation, patch, or detailed technical data.
Warning: #WatchGuard patched a high impact unauthenticated #LDAP injection vulnerability (#CVE-2026-1498) in WatchGuard #Fireware OS and a medium impact privilege escalation #PoE vulnerability #NCPVE-2025-0626 in its mobile VPN with IPSec client. #Patch #Patch #Patch
Post summary
WatchGuard has issued a patch for a high-impact unauthenticated LDAP injection vulnerability (CVE-2026-1498) and a medium-impact privilege escalation vulnerability (NCPVE-2025-0626) in its mobile VPN client.
『This vulnerability may also allow a remote attacker to authenticate as an LDAP user with a partial identifier if they additionally have that user's valid passphrase.』 CVE-2026-1498 WatchGuard Firebox LDAP Injection https://www.watchguard.com/wgrd-psirt/advisory/wgsa-2026-00001
Post summary
The advisory discloses that a remote attacker could authenticate as an LDAP user using a partial identifier and a valid password, but provides no PoC, exploit code, or evidence of active exploitation.
⚠️ Vulnerabilidad en productos WatchGuard ❗ CVE-2026-1498 ➡️ Más info: https://www.cert.gov.py/vulnerabilidad-en-productos-watchguard-3/ https://t.co/b2NIJRifqv
Post summary
A new vulnerability (CVE-2026-1498) affecting WatchGuard products is announced, with additional information referenced via a link.
CVE-2026-1498 LDAP Injection in WatchGuard Fireware OS Enables Unauthorized Information Retrieval https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-1498
Post summary
An announcement of CVE-2026-1498, describing an LDAP injection in WatchGuard Fireware OS that permits unauthorized information retrieval, without any mention of PoCs, exploits, or mitigation steps.