Security Advisory

CVE-2026-13368

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-07-02 23:06:32

Last updated 2026-08-10 17:50:19

Assigner WatchGuard

CVSS score 9.2

State PUBLISHED

Description

WatchGuard Fireware OS contains a race condition leading to a use-after-free vulnerability in LDAP authentication for the Mobile User VPN with IKEv2. A remote unauthenticated attacker could exploit this vulnerability to execute arbitrary code in the context of the iked process on Fireboxes that have a Mobile VPN with IKEv2 configured to use an external LDAP authentication server.

← Browse all CVEs View on cve.org ↗