Is CVE-2026-13050 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-13050 being exploited in the wild.

How severe is CVE-2026-13050?

Informational severity, with a CVSS score of 8.6, published 3 July 2026.

Which products and versions are affected?

Watchguard Fireware 11.0 - 11.12.4_Update1, 12.0 - 12.12, 12.5 - 12.5.18, 2025.1 - 2026.2.

Is there a fix for CVE-2026-13050?

No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

How is CVE-2026-13050 attacked?

It is attacked over the network, in an operating system.

Am I affected by CVE-2026-13050?

Check whether you run Watchguard Fireware at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-13050: WatchGuard Fireware OS out-of-bounds write in networkd

CVE-2026-13050 · Severity: info · CVSS 8.6 · Published 2026-07-03

WatchGuard Fireware OS is the operating system used by Firebox network security appliances to protect corporate networks. A vulnerability in the system's networking process could allow an administrator with existing login credentials to take full control of the device. If exploited, an attacker could execute unauthorized commands, potentially leading to network disruption or unauthorized access to internal traffic.

Technologies: Watchguard Fireware. Vendors: Watchguard.

Quick answers

Is CVE-2026-13050 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-13050 being exploited in the wild.
How severe is CVE-2026-13050?: Informational severity, with a CVSS score of 8.6, published 3 July 2026.
Which products and versions are affected?: Watchguard Fireware 11.0 - 11.12.4_Update1, 12.0 - 12.12, 12.5 - 12.5.18, 2025.1 - 2026.2.
Is there a fix for CVE-2026-13050?: No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-2026-13050 attacked?: It is attacked over the network, in an operating system.
Am I affected by CVE-2026-13050?: Check whether you run Watchguard Fireware at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

An out-of-bounds (OOB) write vulnerability (CWE-787) exists within the 'networkd' process of WatchGuard Fireware OS. The flaw is reachable via specially crafted requests sent to the Management Web UI. While the attack vector is network-based, exploitation requires high privileges (authenticated privileged user). Successful exploitation allows for arbitrary code execution on the underlying appliance. Patches are available in versions 12.12.1 and 2026.2.1, though some older branches like 12.5.x remain unresolved or are End-of-Life.

Affected products

WatchGuard Fireware OS 11.0 - 11.12.4_Update1, 12.0 - 12.12, 12.5 - 12.5.18, 2025.1 - 2026.2

Timeline

2026-07-02: advisory: WatchGuard published advisory WGSA-2026-00029
2026-07-03: disclosed: CVE published to NVD dataset

References

https://www.watchguard.com/wgrd-psirt/advisory/wgsa-2026-00029

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.