Skip to content
CodeAuditAgent

CVE-2026-13054

A path traversal vulnerability in the WatchGuard Fireware OS Management Web UI allows a privileged authenticated attacker to write arbitrary files on the Firebox's filesystem.

Weakness

A path traversal vulnerability in the WatchGuard Fireware OS Management Web UI allows a privileged authenticated attacker to write arbitrary files on the Firebox's filesystem.

Affected products

  • watchguard fireware
  • watchguard firebox_m270
  • watchguard firebox_m290
  • watchguard firebox_m370
  • watchguard firebox_m390
  • watchguard firebox_m440
  • watchguard firebox_m4600
  • watchguard firebox_m470

References

Find the bug before an attacker does.

Sign in with GitHub and run your first audit in under a minute. The free plan needs no credit card.