CVE-2026-13368

Name of the Vulnerable Software and Affected Versions WatchGuard Fireware OS versions 11.0 through 11.12.4 Update1 WatchGuard Fireware OS versions 12.0 through 12.12 WatchGuard Fireware OS versions 2025.1 through 2026.2

Description A race condition leads to a use-after-free issue in LDAP authentication for the Mobile User VPN with IKEv2. A remote unauthenticated attacker can exploit this to execute arbitrary code within the context of the iked process on Fireboxes configured to use an external LDAP authentication server.

Recommendations Update Fireware OS versions 11.0 through 11.12.4 Update1 to the latest patched version. Update Fireware OS versions 12.0 through 12.12 to the latest patched version. Update Fireware OS versions 2025.1 through 2026.2 to the latest patched version.