CVE-2026-13371
WatchGuard Firebox Management Web UI Denial of Service via Unsafe Deserialization
Description
An authenticated administrator can trigger a denial-of-service condition in the Fireware Management Web UI by sending malformed or crafted data to the put_data endpoint, which performs unsafe deserialization of the attacker-supplied input.
INFO
Published Date :
July 2, 2026, 11:04 p.m.
Last Modified :
July 2, 2026, 11:04 p.m.
Remotely Exploit :
Yes !
Source :
WatchGuard
CVSS Scores
| Score | Version | Severity | Vector | Exploitability Score | Impact Score | Source |
|---|---|---|---|---|---|---|
| CVSS 4.0 | MEDIUM | 5d1c2695-1a31-4499-88ae-e847036fd7e3 |
Solution
- Apply vendor patches or updates when available.
- Validate and sanitize all input data rigorously.
- Restrict access to the put_data endpoint.
We scan GitHub repositories to detect new proof-of-concept exploits. Following list is a collection of public exploits and proof-of-concepts, which have been published on GitHub (sorted by the most recently updated).
Results are limited to the first 15 repositories due to potential performance issues.
The following list is the news that have been mention
CVE-2026-13371 vulnerability anywhere in the article.