Vulnerabilities in WatchGuard Fireware OS

WatchGuard has identified several vulnerabilities in the Fireware OS. The impact of these vulnerabilities varies, as does the access rights required for exploitation. – An attacker with write permissions to the system can exploit a vulnerability in SAML single sign-on sessions to load malicious...

EUVD-2026-89496

A path traversal vulnerability in the Fireware OS WebUI management agent allows an authenticated administrator to read or list arbitrary files on the local filesystem by sending a specially crafted management request...

CVE-2026-13224

A path traversal vulnerability in the Fireware OS WebUI management agent allows an authenticated administrator to read or list arbitrary files on the local filesystem by sending a specially crafted management request...

CVE-2026-13224: Improper Limitation of a Pathname to a Restricted Directory

A path traversal vulnerability in the Fireware OS WebUI management agent allows an authenticated administrator to read or list arbitrary files on the local filesystem by sending a specially crafted management request...

CVE-2026-13224 Fireware OS Path Traversal in WebUI Management Agent Allows Arbitrary Local File Read

A path traversal vulnerability in the Fireware OS WebUI management agent allows an authenticated administrator to read or list arbitrary files on the local filesystem by sending a specially crafted management request...

CVE-2026-13224 Fireware OS Path Traversal in WebUI Management Agent Allows Arbitrary Local File Read

A path traversal vulnerability in the Fireware OS WebUI management agent allows an authenticated administrator to read or list arbitrary files on the local filesystem by sending a specially crafted management request...

CVE-2026-13224

A path traversal vulnerability exists in the Fireware OS WebUI management agent . This flaw allows an authenticated administrator to read or list arbitrary files on the local filesystem by sending a specially crafted management request. The vulnerability impacts the confidentiality of local syste...

PT-2026-102946

Name of the Vulnerable Software and Affected Versions Fireware OS affected versions not specified Description A path traversal issue in the WebUI management agent allows an authenticated administrator to read or list arbitrary files on the local filesystem by sending a specially crafted managemen...

Design/Logic Flaw

An issue was discovered in Barco ClickShare CSM-1 firmware before v1.7.0.3 and CSC-1 firmware before v1.10.0.10. An authenticated user can manage the wallpaper collection in the webUI to be shown as background on the ClickShare product. By uploading a wallpaper with a specially crafted name, an...