PT-2026-29022 · Watchguard · Firebox T-35+2
CVSS v4.0
8.4
High
| Vector | AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N |
Name of the Vulnerable Software and Affected Versions
WatchGuard Fireware OS versions 12.1 through 12.11.8
WatchGuard Fireware OS versions 2025.1 through 2026.1.2
Description
An insecure deserialization issue allows an attacker who has already obtained write access to the local filesystem via a separate vulnerability to execute arbitrary code. The execution occurs within the context of the
portald user. This issue only affects platforms that support the Access Portal feature.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Deserialization of Untrusted Data
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Firebox T-15
Firebox T-35
Watchguard Fireware