CVE-2026-13046

Name of the Vulnerable Software and Affected Versions WatchGuard Fireware OS (affected versions not specified)

Description An issue exists in the SAML single sign-on session handling (samld) where untrusted data is deserialized. An attacker who has already obtained the ability to write files on the appliance can execute arbitrary code within the context of the samld service by inducing the service to load a maliciously crafted session file. Deserialization is the process of converting a data format, such as a file or network stream, back into an object that can be used by a program.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.