CVE-2026-13368

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-13368", "assignerOrgId": "5d1c2695-1a31-4499-88ae-e847036fd7e3", "state": "PUBLISHED", "assignerShortName": "WatchGuard", "dateReserved": "2026-06-25T19:00:06.688Z", "datePublished": "2026-07-02T23:06:32.928Z", "dateUpdated": "2026-08-27T22:58:26.790Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "5d1c2695-1a31-4499-88ae-e847036fd7e3", "shortName": "WatchGuard", "dateUpdated": "2026-08-27T22:58:26.790Z"}, "title": "WatchGuard Firebox Race Condition and Use-After-Free in Mobile VPN with IKEv2 LDAP Authentication", "descriptions": [{"lang": "en", "value": "WatchGuard Fireware OS contains a race condition leading to a use-after-free vulnerability in LDAP authentication for the Mobile User VPN with IKEv2. A remote unauthenticated attacker could exploit this vulnerability to execute arbitrary code in the context of the iked process on Fireboxes that have a Mobile VPN with IKEv2 configured to use an external LDAP authentication server."}], "affected": [{"vendor": "WatchGuard", "product": "Fireware OS", "versions": [{"status": "affected", "version": "2025.1", "versionType": "custom", "lessThan": "2026.2.1"}, {"status": "unaffected", "version": "12.0", "versionType": "custom", "lessThan": "12.12.1"}, {"status": "unaffected", "version": "11.10.2", "versionType": "custom", "lessThanOrEqual": "11.12.4+541730"}], "defaultStatus": "unaffected", "platforms": ["Default"]}, {"vendor": "WatchGuard", "product": "Fireware OS", "versions": [{"status": "affected", "version": "12.0", "versionType": "custom", "lessThan": "12.11.9"}], "defaultStatus": "unaffected", "platforms": ["EUCC"]}, {"vendor": "WatchGuard", "product": "Fireware OS", "versions": [{"status": "affected", "version": "12.0", "versionType": "custom", "lessThan": "12.5.19"}], "defaultStatus": "unaffected", "platforms": ["T15/T35"]}], "references": [{"url": "https://psirt.watchguard.com/CVE-2026-13368", "tags": ["vendor-advisory"]}, {"url": "https://www.watchguard.com/wgrd-psirt/advisory/wgsa-2026-00023", "tags": ["vendor-advisory"]}], "cpeApplicability": [{"operator": "OR", "nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:a:watchguard:fireware_os:*:*:*:*:*:*:*:*", "versionStartIncluding": "12.0", "versionEndExcluding": "12.11.9"}, {"vulnerable": true, "criteria": "cpe:2.3:a:watchguard:fireware_os:*:*:*:*:*:*:*:*", "versionStartIncluding": "12.0", "versionEndExcluding": "12.5.19"}, {"vulnerable": true, "criteria": "cpe:2.3:a:watchguard:fireware_os:*:*:*:*:*:*:*:*", "versionStartIncluding": "2025.1", "versionEndExcluding": "2026.2.1"}, {"vulnerable": false, "criteria": "cpe:2.3:a:watchguard:fireware_os:*:*:*:*:*:*:*:*", "versionStartIncluding": "12.0", "versionEndExcluding": "12.12.1"}, {"vulnerable": false, "criteria": "cpe:2.3:a:watchguard:fireware_os:*:*:*:*:*:*:*:*", "versionStartIncluding": "11.10.2", "versionEndIncluding": "11.12.4+541730"}]}]}], "metrics": [{"cvssV4_0": {"version": "4.0", "vectorString": "CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N", "baseScore": 9.2, "baseSeverity": "CRITICAL"}}], "problemTypes": [{"descriptions": [{"lang": "en", "description": "CWE-416", "type": "CWE", "cweId": "CWE-416"}]}], "credits": [{"lang": "en", "value": "Cody Sixteen", "type": "finder"}], "solutions": [{"lang": "en", "value": "Fireware OS 2026.2.1, Fireware OS 12.0, Fireware OS 11.10.2, Fireware OS 12.5.19, Fireware OS 12.11.9", "supportingMedia": [{"type": "text/html", "base64": false, "value": "Fireware OS 2026.2.1, Fireware OS 12.0, Fireware OS 11.10.2, Fireware OS 12.5.19, Fireware OS 12.11.9"}]}], "exploits": [{"lang": "en", "value": "WatchGuard is not aware of any exploitation of this vulnerability in the wild.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "WatchGuard is not aware of any exploitation of this vulnerability in the wild."}]}], "datePublic": "2026-07-02T23:06:32.928Z"}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-07-06T00:00:00+00:00", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3", "id": "CVE-2026-13368"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-07-07T03:56:35.031Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-13368", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2026-07-06T14:50:16.979549Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-07-06T14:50:23.252Z"}}], "cna": {"title": "WatchGuard Firebox Race Condition and Use-After-Free in Mobile VPN with IKEv2 LDAP Authentication", "credits": [{"lang": "en", "type": "finder", "value": "Cody Sixteen"}], "metrics": [{"cvssV4_0": {"version": "4.0", "baseScore": 9.2, "baseSeverity": "CRITICAL", "vectorString": "CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"}}], "affected": [{"vendor": "WatchGuard", "product": "Fireware OS", "versions": [{"status": "affected", "version": "2025.1", "lessThan": "2026.2.1", "versionType": "custom"}, {"status": "unaffected", "version": "12.0", "lessThan": "12.12.1", "versionType": "custom"}, {"status": "unaffected", "version": "11.10.2", "versionType": "custom", "lessThanOrEqual": "11.12.4+541730"}], "platforms": ["Default"], "defaultStatus": "unaffected"}, {"vendor": "WatchGuard", "product": "Fireware OS", "versions": [{"status": "affected", "version": "12.0", "lessThan": "12.11.9", "versionType": "custom"}], "platforms": ["EUCC"], "defaultStatus": "unaffected"}, {"vendor": "WatchGuard", "product": "Fireware OS", "versions": [{"status": "affected", "version": "12.0", "lessThan": "12.5.19", "versionType": "custom"}], "platforms": ["T15/T35"], "defaultStatus": "unaffected"}], "exploits": [{"lang": "en", "value": "WatchGuard is not aware of any exploitation of this vulnerability in the wild.", "supportingMedia": [{"type": "text/html", "value": "WatchGuard is not aware of any exploitation of this vulnerability in the wild.", "base64": false}]}], "solutions": [{"lang": "en", "value": "Fireware OS 2026.2.1, Fireware OS 12.0, Fireware OS 11.10.2, Fireware OS 12.5.19, Fireware OS 12.11.9", "supportingMedia": [{"type": "text/html", "value": "Fireware OS 2026.2.1, Fireware OS 12.0, Fireware OS 11.10.2, Fireware OS 12.5.19, Fireware OS 12.11.9", "base64": false}]}], "datePublic": "2026-07-02T23:06:32.928Z", "references": [{"url": "https://psirt.watchguard.com/CVE-2026-13368", "tags": ["vendor-advisory"]}, {"url": "https://www.watchguard.com/wgrd-psirt/advisory/wgsa-2026-00023", "tags": ["vendor-advisory"]}], "descriptions": [{"lang": "en", "value": "WatchGuard Fireware OS contains a race condition leading to a use-after-free vulnerability in LDAP authentication for the Mobile User VPN with IKEv2. A remote unauthenticated attacker could exploit this vulnerability to execute arbitrary code in the context of the iked process on Fireboxes that have a Mobile VPN with IKEv2 configured to use an external LDAP authentication server."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-416", "description": "CWE-416"}]}], "cpeApplicability": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:watchguard:fireware_os:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "12.11.9", "versionStartIncluding": "12.0"}, {"criteria": "cpe:2.3:a:watchguard:fireware_os:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "12.5.19", "versionStartIncluding": "12.0"}, {"criteria": "cpe:2.3:a:watchguard:fireware_os:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "2026.2.1", "versionStartIncluding": "2025.1"}, {"criteria": "cpe:2.3:a:watchguard:fireware_os:*:*:*:*:*:*:*:*", "vulnerable": false, "versionEndExcluding": "12.12.1", "versionStartIncluding": "12.0"}, {"criteria": "cpe:2.3:a:watchguard:fireware_os:*:*:*:*:*:*:*:*", "vulnerable": false, "versionEndIncluding": "11.12.4+541730", "versionStartIncluding": "11.10.2"}], "operator": "OR"}], "operator": "OR"}], "providerMetadata": {"orgId": "5d1c2695-1a31-4499-88ae-e847036fd7e3", "shortName": "WatchGuard", "dateUpdated": "2026-08-27T22:58:26.790Z"}}}, "cveMetadata": {"cveId": "CVE-2026-13368", "state": "PUBLISHED", "dateUpdated": "2026-08-27T22:58:26.790Z", "dateReserved": "2026-06-25T19:00:06.688Z", "assignerOrgId": "5d1c2695-1a31-4499-88ae-e847036fd7e3", "datePublished": "2026-07-02T23:06:32.928Z", "assignerShortName": "WatchGuard"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "platforms": ["Default"], "product": "Fireware OS", "vendor": "WatchGuard", "versions": [{"lessThan": "2026.2.1", "status": "affected", "version": "2025.1", "versionType": "custom"}, {"lessThan": "12.12.1", "status": "unaffected", "version": "12.0", "versionType": "custom"}, {"lessThanOrEqual": "11.12.4+541730", "status": "unaffected", "version": "11.10.2", "versionType": "custom"}]}, {"defaultStatus": "unaffected", "platforms": ["EUCC"], "product": "Fireware OS", "vendor": "WatchGuard", "versions": [{"lessThan": "12.11.9", "status": "affected", "version": "12.0", "versionType": "custom"}]}, {"defaultStatus": "unaffected", "platforms": ["T15/T35"], "product": "Fireware OS", "vendor": "WatchGuard", "versions": [{"lessThan": "12.5.19", "status": "affected", "version": "12.0", "versionType": "custom"}]}], "source": "5d1c2695-1a31-4499-88ae-e847036fd7e3"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:watchguard:fireware:*:*:*:*:*:*:*:*", "matchCriteriaId": "51B8E788-8FAF-4681-9750-488B2691F473", "versionEndExcluding": "2026.2.1", "versionStartIncluding": "2025.1", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:watchguard:firebox_m295:-:*:*:*:*:*:*:*", "matchCriteriaId": "615FF2CF-69DA-4890-9236-52D8D6FA0E71", "vulnerable": false}, {"criteria": "cpe:2.3:h:watchguard:firebox_m395:-:*:*:*:*:*:*:*", "matchCriteriaId": "A3439409-2FD6-447B-91CF-17D1C09E2A79", "vulnerable": false}, {"criteria": "cpe:2.3:h:watchguard:firebox_m495:-:*:*:*:*:*:*:*", "matchCriteriaId": "C0C0412F-AB02-4D13-B159-D0FCD2ECA3ED", "vulnerable": false}, {"criteria": "cpe:2.3:h:watchguard:firebox_m595:-:*:*:*:*:*:*:*", "matchCriteriaId": "575CC5EE-0278-489B-AA95-5EC5058D6FB9", "vulnerable": false}, {"criteria": "cpe:2.3:h:watchguard:firebox_m695:-:*:*:*:*:*:*:*", "matchCriteriaId": "5597F672-3C72-4BCF-AD3F-F16B6913EC2F", "vulnerable": false}, {"criteria": "cpe:2.3:h:watchguard:firebox_t115-w:-:*:*:*:*:*:*:*", "matchCriteriaId": "E8AAE66B-DD19-4C90-8DFC-F77BA1541642", "vulnerable": false}, {"criteria": "cpe:2.3:h:watchguard:firebox_t125:-:*:*:*:*:*:*:*", "matchCriteriaId": "7FC18430-C6B4-4395-BFF1-83BB005875BA", "vulnerable": false}, {"criteria": "cpe:2.3:h:watchguard:firebox_t125-w:-:*:*:*:*:*:*:*", "matchCriteriaId": "1A7C1C91-8B6E-4FB0-841E-7F88B06B1435", "vulnerable": false}, {"criteria": "cpe:2.3:h:watchguard:firebox_t145:-:*:*:*:*:*:*:*", "matchCriteriaId": "8FE309D6-BD5E-4D18-91C3-A492C3576115", "vulnerable": false}, {"criteria": "cpe:2.3:h:watchguard:firebox_t145-w:-:*:*:*:*:*:*:*", "matchCriteriaId": "75959D39-0960-4836-96C7-DB8048DDE4B8", "vulnerable": false}, {"criteria": "cpe:2.3:h:watchguard:firebox_t185:-:*:*:*:*:*:*:*", "matchCriteriaId": "D0087049-27C6-4B18-A645-72A8F63D7C6D", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:watchguard:fireware:*:*:*:*:*:*:*:*", "matchCriteriaId": "1516BDB6-FE26-4A40-A3C9-87ED9687F396", "versionEndExcluding": "12.5.19", "versionStartIncluding": "12.5", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:watchguard:firebox_t15:-:*:*:*:*:*:*:*", "matchCriteriaId": "626220F8-7F0C-4DD8-8001-12EA0A777A0D", "vulnerable": false}, {"criteria": "cpe:2.3:h:watchguard:firebox_t35:-:*:*:*:*:*:*:*", "matchCriteriaId": "E561A57F-91A5-4B3C-9F7D-62E9AB5163A7", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:watchguard:fireware:*:*:*:*:*:*:*:*", "matchCriteriaId": "506084FE-449B-4C08-B118-7537D3A135E5", "versionEndExcluding": "11.12.4", "versionStartIncluding": "11.0.0", "vulnerable": true}, {"criteria": "cpe:2.3:o:watchguard:fireware:11.12.4:-:*:*:*:*:*:*", "matchCriteriaId": "AEA2B91B-8C5E-445D-97A6-314936B00349", "vulnerable": true}, {"criteria": "cpe:2.3:o:watchguard:fireware:11.12.4:u1:*:*:*:*:*:*", "matchCriteriaId": "3F4679A8-CFA1-4D0B-B08D-90835D8EECA9", "vulnerable": true}], "negate": false, "operator": "OR"}]}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:watchguard:fireware:*:*:*:*:*:*:*:*", "matchCriteriaId": "9FEF8DD4-1432-4109-967A-B03188988266", "versionEndExcluding": "12.12.1", "versionStartIncluding": "12.0", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:a:watchguard:firebox_cloud:-:*:*:*:*:*:*:*", "matchCriteriaId": "BD0A5008-C4F7-434B-8C10-AEB5B1F9E071", "vulnerable": false}, {"criteria": "cpe:2.3:h:watchguard:firebox_m270:-:*:*:*:*:*:*:*", "matchCriteriaId": "E472917E-D6E1-4C2D-B37D-E76FCC7307CA", "vulnerable": false}, {"criteria": "cpe:2.3:h:watchguard:firebox_m290:-:*:*:*:*:*:*:*", "matchCriteriaId": "9A8C7779-4466-4A9E-B191-929E7746DFF7", "vulnerable": false}, {"criteria": "cpe:2.3:h:watchguard:firebox_m370:-:*:*:*:*:*:*:*", "matchCriteriaId": "6CE9A123-B769-4E56-845E-DC3DA6166C78", "vulnerable": false}, {"criteria": "cpe:2.3:h:watchguard:firebox_m390:-:*:*:*:*:*:*:*", "matchCriteriaId": "180FAE8C-2E73-4C09-AA11-0C82A7715FA3", "vulnerable": false}, {"criteria": "cpe:2.3:h:watchguard:firebox_m440:-:*:*:*:*:*:*:*", "matchCriteriaId": "309DBEF2-1D92-4641-827F-D99758B5FFA3", "vulnerable": false}, {"criteria": "cpe:2.3:h:watchguard:firebox_m4600:-:*:*:*:*:*:*:*", "matchCriteriaId": "D1E8CFC5-51FE-4D75-845F-D70C30AF11B0", "vulnerable": false}, {"criteria": "cpe:2.3:h:watchguard:firebox_m470:-:*:*:*:*:*:*:*", "matchCriteriaId": "BBFBA966-E052-4350-9544-3B5D484DBB6B", "vulnerable": false}, {"criteria": "cpe:2.3:h:watchguard:firebox_m4800:-:*:*:*:*:*:*:*", "matchCriteriaId": "EF1E586D-0E88-447A-95E8-5203EF869ADB", "vulnerable": false}, {"criteria": "cpe:2.3:h:watchguard:firebox_m5600:-:*:*:*:*:*:*:*", "matchCriteriaId": "1BC087C4-CB10-46D4-A746-0C462354410C", "vulnerable": false}, {"criteria": "cpe:2.3:h:watchguard:firebox_m570:-:*:*:*:*:*:*:*", "matchCriteriaId": "59389EA2-3067-4AF8-AEC5-FE79E269C170", "vulnerable": false}, {"criteria": "cpe:2.3:h:watchguard:firebox_m5800:-:*:*:*:*:*:*:*", "matchCriteriaId": "445FA7CD-D0AE-4176-9AE5-293B918DE654", "vulnerable": false}, {"criteria": "cpe:2.3:h:watchguard:firebox_m590:-:*:*:*:*:*:*:*", "matchCriteriaId": "1B4A7366-0304-431E-B3E4-719BA575CEAC", "vulnerable": false}, {"criteria": "cpe:2.3:h:watchguard:firebox_m670:-:*:*:*:*:*:*:*", "matchCriteriaId": "E8512B4A-5269-4067-B9C6-475A4E8AD313", "vulnerable": false}, {"criteria": "cpe:2.3:h:watchguard:firebox_m690:-:*:*:*:*:*:*:*", "matchCriteriaId": "179C6166-87E1-44F8-B727-CDDE40C673D9", "vulnerable": false}, {"criteria": "cpe:2.3:h:watchguard:firebox_nv5:-:*:*:*:*:*:*:*", "matchCriteriaId": "584107CC-6136-4AA1-AE68-73B93BDDB5B6", "vulnerable": false}, {"criteria": "cpe:2.3:h:watchguard:firebox_t20:-:*:*:*:*:*:*:*", "matchCriteriaId": "9295217E-C1A0-4A69-A0F0-C44814BB376C", "vulnerable": false}, {"criteria": "cpe:2.3:h:watchguard:firebox_t25:-:*:*:*:*:*:*:*", "matchCriteriaId": "7DC49246-2166-4681-8D67-4C0940884872", "vulnerable": false}, {"criteria": "cpe:2.3:h:watchguard:firebox_t40:-:*:*:*:*:*:*:*", "matchCriteriaId": "CC853916-8BDC-4F7C-BA53-D6AB490A9444", "vulnerable": false}, {"criteria": "cpe:2.3:h:watchguard:firebox_t45:-:*:*:*:*:*:*:*", "matchCriteriaId": "DCB1A254-DA3C-4032-B2C6-C9EBCE8EC15E", "vulnerable": false}, {"criteria": "cpe:2.3:h:watchguard:firebox_t55:-:*:*:*:*:*:*:*", "matchCriteriaId": "D3562304-0317-4A3C-B622-D5CE01CC97F9", "vulnerable": false}, {"criteria": "cpe:2.3:h:watchguard:firebox_t70:-:*:*:*:*:*:*:*", "matchCriteriaId": "327BA50A-366A-4367-93B8-328EC0136FA7", "vulnerable": false}, {"criteria": "cpe:2.3:h:watchguard:firebox_t80:-:*:*:*:*:*:*:*", "matchCriteriaId": "D92ABD52-20F6-4AB1-801F-9E7B7B1B78A1", "vulnerable": false}, {"criteria": "cpe:2.3:h:watchguard:firebox_t85:-:*:*:*:*:*:*:*", "matchCriteriaId": "3552F3BB-8021-4E87-987D-870699A7E619", "vulnerable": false}, {"criteria": "cpe:2.3:h:watchguard:fireboxv:-:*:*:*:*:*:*:*", "matchCriteriaId": "4ECAE1D7-9868-4730-B645-44CB1B6FDE96", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "WatchGuard Fireware OS contains a race condition leading to a use-after-free vulnerability in LDAP authentication for the Mobile User VPN with IKEv2. A remote unauthenticated attacker could exploit this vulnerability to execute arbitrary code in the context of the iked process on Fireboxes that have a Mobile VPN with IKEv2 configured to use an external LDAP authentication server."}, {"lang": "es", "value": "WatchGuard Fireware OS contiene una condici\u00f3n de carrera que conduce a una vulnerabilidad de uso despu\u00e9s de liberaci\u00f3n en la autenticaci\u00f3n LDAP para la VPN de usuario m\u00f3vil con IKEv2. Un atacante remoto no autenticado podr\u00eda explotar esta vulnerabilidad para ejecutar c\u00f3digo arbitrario en el contexto del proceso iked en Fireboxes que tienen una VPN m\u00f3vil con IKEv2 configurada para usar un servidor de autenticaci\u00f3n LDAP externo.\n\nEsta vulnerabilidad afecta a Fireware OS 11.0 hasta e incluyendo 11.12.4_Update1, 12.0 hasta e incluyendo 12.12 y 2025.1 hasta e incluyendo 2026.2."}], "id": "CVE-2026-13368", "lastModified": "2026-10-25T21:10:00.770", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.1, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 2.2, "impactScore": 5.9, "source": "nvd@nist.gov", "type": "Primary"}], "cvssMetricV40": [{"cvssData": {"Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "Safety": "NOT_DEFINED", "attackComplexity": "HIGH", "attackRequirements": "PRESENT", "attackVector": "NETWORK", "availabilityRequirement": "NOT_DEFINED", "baseScore": 9.2, "baseSeverity": "CRITICAL", "confidentialityRequirement": "NOT_DEFINED", "exploitMaturity": "NOT_DEFINED", "integrityRequirement": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "privilegesRequired": "NONE", "providerUrgency": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "subConfidentialityImpact": "NONE", "subIntegrityImpact": "NONE", "userInteraction": "NONE", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "version": "4.0", "vulnAvailabilityImpact": "HIGH", "vulnConfidentialityImpact": "HIGH", "vulnIntegrityImpact": "HIGH", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "source": "5d1c2695-1a31-4499-88ae-e847036fd7e3", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-13368", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "role": "CISA Coordinator", "timestamp": "2026-07-06T00:00:00+00:00", "version": "2.0.3"}}]}, "published": "2026-07-03T00:16:50.890", "references": [{"source": "5d1c2695-1a31-4499-88ae-e847036fd7e3", "tags": ["Broken Link"], "url": "https://psirt.watchguard.com/CVE-2026-13368"}, {"source": "5d1c2695-1a31-4499-88ae-e847036fd7e3", "tags": ["Vendor Advisory"], "url": "https://www.watchguard.com/wgrd-psirt/advisory/wgsa-2026-00023"}], "sourceIdentifier": "5d1c2695-1a31-4499-88ae-e847036fd7e3", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-416"}], "source": "5d1c2695-1a31-4499-88ae-e847036fd7e3", "type": "Secondary"}]}

{}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[11.10.2,11.12.4+541730]"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[12.0,12.12]"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[12.5,12.5.18]"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[2025.1,2026.2]"}}], "enrichment": {"confidence": 95.0, "confidence_source": "inferred", "scores": [{"score": 95.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Fireware OS", "source": "cna", "vendor": "WatchGuard"}, "product": "fireware_os", "vendor": "watchguard"}], "created": "2026-07-03T01:45:04.852935+00:00", "updated": "2026-08-10T23:15:05.954912+00:00", "vendors": ["watchguard", "watchguard$PRODUCT$fireware_os"]}