CVE-2026-13054: WatchGuard Firebox Arbitrary File Write via Path Traversal in Management Web UI

High severity · published Jul 2, 2026

CVE-2026-13054

WatchGuard Firebox Arbitrary File Write via Path Traversal in Management Web UI

7.2

CVSS

0.6%

EPSS

On KEV

Description

A path traversal vulnerability in the WatchGuard Fireware OS Management Web UI allows a privileged authenticated attacker to write arbitrary files on the Firebox's filesystem.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Attack vector

Network

Complexity

Low

Privileges

High

User interaction

None

Confidentiality

High

Integrity

High

Availability

High

Scope

Unchanged

Exploitation

Is it being used?

Exploit prediction (EPSS)0.6% · higher than 49% of CVEs

Exploited in the wildNo evidence yet

CISA KEVNot listed

Ransomware campaign useNot known

Affected products

Which versions

Fireware OS · WatchGuard

2025.1 before 2026.2.1; 12.0 before 12.12.1; 11.0; 12.0 before 12.11.9; 12.0 before 12.5.19 · source: vendor

Fireware · Watchguard

11.0 before 12.12.1; 2025.1 before 2026.2.1; 11.0 through 12.5.18 · source: NVD

In the news

VulnerabilityHigh

ZDI-26-501: WatchGuard FireWare OS sigd comp_start_cb Directory Traversal Arbitrary File Creation Vulnerability

This vulnerability allows remote attackers to create arbitrary files on affected installations of WatchGuard FireWare OS. Authentication is required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.2. The following CVEs are assigned: CVE-2026-13054.

CVE-2026-13054

Jul 29, 2026·Zero Day Initiative

Affected product

Fireware OS

WatchGuard

All Fireware OS CVEs

References

NVD

https://nvd.nist.gov/vuln/detail/CVE-2026-13054

CVE.org

https://www.cve.org/CVERecord?id=CVE-2026-13054

psirt.watchguard.com

https://psirt.watchguard.com/CVE-2026-13054

Vendor Advisory

https://www.watchguard.com/wgrd-psirt/advisory/wgsa-2026-00028