PT-2026-5396 · Watchguard · Watchguard Fireware

Published 2026-01-30 · Updated 2026-02-06 · CVE-2026-1498

Positive Technologies (AI Summary)

CVSS v4.0

7.0

High

Base vector

AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N

Name of the Vulnerable Software and Affected Versions WatchGuard Fireware OS versions 12.0 through 12.11.6 WatchGuard Fireware OS versions 12.5 through 12.5.15 WatchGuard Fireware OS versions 2025.1 through 2026.0

Description A flaw exists in WatchGuard Fireware OS that could allow a remote, unauthenticated attacker to obtain sensitive information from a connected LDAP authentication server via an exposed authentication or management web interface. The issue may also permit a remote attacker to authenticate as an LDAP user if they possess a partial identifier and the user's valid passphrase.

Recommendations Update to a version later than 12.11.6 Update to a version later than 12.5.15 Update to a version later than 2026.0

Fix

Weakness Enumeration

CWE-90

Related Identifiers

CVE-2026-1498

Affected Products

Watchguard Fireware

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2026-1498 · Security Note
• https://t.me/cveNotify/150389 · Telegram Post
• https://twitter.com/autumn_good_35/status/2019799776737530141 · Twitter Post
• https://t.me/CVEtracker/43281 · Telegram Post
• https://twitter.com/VulmonFeeds/status/2017231812817232250 · Twitter Post
• https://watchguard.com/wgrd-psirt/advisory/wgsa-2026-00001 · Note