CVE-2026-13368

🗓️ 02 Jul 2026 23:06:32Reported by WatchGuardType

WatchGuard Firebox race condition causes use-after-free in LDAP authentication for Mobile VPN with Internet Key Exchange, enabling remote code execution.

Reporter	Title	Published	Views	Family All 7
ATTACKERKB	CVE-2026-13368	2 Jul 202623:06	–	attackerkb
Circl	CVE-2026-13368	3 Jul 202601:30	–	circl
Cvelist	CVE-2026-13368 WatchGuard Firebox Race Condition and Use-After-Free in Mobile VPN with IKEv2 LDAP Authentication	2 Jul 202623:06	–	cvelist
EUVD	EUVD-2026-41456	3 Jul 202600:31	–	euvd
NVD	CVE-2026-13368	3 Jul 202600:16	–	nvd
Positive Technologies	PT-2026-55327	2 Jul 202600:00	–	ptsecurity
Vulnrichment	CVE-2026-13368 WatchGuard Firebox Race Condition and Use-After-Free in Mobile VPN with IKEv2 LDAP Authentication	2 Jul 202623:06	–	vulnrichment

NVD

CNA

Node

AND

watchguard firewareRange2025.1–2026.2.1

watchguard firebox_m295Match-

watchguard firebox_m395Match-

watchguard firebox_m495Match-

watchguard firebox_m595Match-

watchguard firebox_m695Match-

watchguard firebox_t115-wMatch-

watchguard firebox_t125Match-

watchguard firebox_t125-wMatch-

watchguard firebox_t145Match-

watchguard firebox_t145-wMatch-

watchguard firebox_t185Match-

Node

AND

watchguard firewareRange12.5–12.5.19

watchguard firebox_t15Match-

watchguard firebox_t35Match-

Node

watchguard firewareRange11.0.0–11.12.4

watchguard firewareMatch11.12.4-

watchguard firewareMatch11.12.4u1

Node

AND

watchguard firewareRange12.0–12.12.1

watchguard firebox_cloudMatch-

watchguard firebox_m270Match-

watchguard firebox_m290Match-

watchguard firebox_m370Match-

watchguard firebox_m390Match-

watchguard firebox_m440Match-

watchguard firebox_m4600Match-

watchguard firebox_m470Match-

watchguard firebox_m4800Match-

watchguard firebox_m5600Match-

watchguard firebox_m570Match-

watchguard firebox_m5800Match-

watchguard firebox_m590Match-

watchguard firebox_m670Match-

watchguard firebox_m690Match-

watchguard firebox_nv5Match-

watchguard firebox_t20Match-

watchguard firebox_t25Match-

watchguard firebox_t40Match-

watchguard firebox_t45Match-

watchguard firebox_t55Match-

watchguard firebox_t70Match-

watchguard firebox_t80Match-

watchguard firebox_t85Match-

watchguard fireboxvMatch-

[
  {
    "vendor": "WatchGuard",
    "product": "Fireware OS",
    "versions": [
      {
        "status": "affected",
        "version": "2025.1",
        "versionType": "custom",
        "lessThan": "2026.2.1"
      },
      {
        "status": "unaffected",
        "version": "12.0",
        "versionType": "custom",
        "lessThan": "12.12.1"
      },
      {
        "status": "unaffected",
        "version": "11.10.2",
        "versionType": "custom",
        "lessThanOrEqual": "11.12.4+541730"
      }
    ],
    "defaultStatus": "unaffected",
    "platforms": [
      "Default"
    ]
  },
  {
    "vendor": "WatchGuard",
    "product": "Fireware OS",
    "versions": [
      {
        "status": "affected",
        "version": "12.0",
        "versionType": "custom",
        "lessThan": "12.11.9"
      }
    ],
    "defaultStatus": "unaffected",
    "platforms": [
      "EUCC"
    ]
  },
  {
    "vendor": "WatchGuard",
    "product": "Fireware OS",
    "versions": [
      {
        "status": "affected",
        "version": "12.0",
        "versionType": "custom",
        "lessThan": "12.5.19"
      }
    ],
    "defaultStatus": "unaffected",
    "platforms": [
      "T15/T35"
    ]
  }
]

Source	Link
psirt	www.psirt.watchguard.com/CVE-2026-13368
watchguard	www.watchguard.com/wgrd-psirt/advisory/wgsa-2026-00023

28 Aug 2026 00:16Current

6Medium risk

Vulners AI Score6

CVSS 3.18.1

CVSS 49.2

EPSS0.01012

SSVC

CWE-416