CVE-2026-13371 — WatchGuard Firebox Management Web UI Denial of Service via Unsafe Deserialization
An authenticated administrator can trigger a denial-of-service condition in the Fireware Management Web UI by sending malformed or crafted data to the put_data endpoint, which p…
Published: 2026-07-02 · CVSS: 6.9 · CVSS 4.0
An authenticated administrator can trigger a denial-of-service condition in the Fireware Management Web UI by sending malformed or crafted data to the put_data endpoint, which performs unsafe deserialization of the attacker-supplied input.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7