CVE-2026-13054 – WatchGuard Firebox Arbitrary File Write via Path Traversal in Management Web UI

CVE ID :CVE-2026-13054

Published : July 2, 2026, 11:07 p.m. | 39 minutes ago

Description :A path traversal vulnerability in the WatchGuard Fireware OS Management Web UI allows a privileged authenticated attacker to write arbitrary files on the Firebox’s filesystem.

This vulnerability affects Fireware OS 11.0 up to and including 11.12.4_Update1, 12.0 up to and including 12.12 and 2025.1 up to and including 2026.2.

Severity: 8.6 | HIGH

Visit the link for more details, such as CVSS details, affected products, timeline, and more…