This vulnerability (CVE-2026-13053) is an out-of-bounds write (CWE-787) in the CLI component of WatchGuard Fireware OS. It enables an authenticated user with privileged access to execute arbitrary code by crafting a malicious CLI command. Affected versions include Fireware OS 11.0 up to 11.12.4_Update1, 12.0 up to 12.12, and 2025.1 up to 2026.2. The vulnerability has a high CVSS 4.0 score of 8.6, reflecting network attack vector, low attack complexity, no user interaction, and high impact on confidentiality, integrity, and availability. The vendor has not yet published an official fix or remediation level, and no exploits have been reported in the wild.

Successful exploitation allows an authenticated privileged user to execute arbitrary code on the affected Fireware OS device. This could lead to full compromise of the device, impacting confidentiality, integrity, and availability of the system and potentially the network it protects. The vulnerability requires privileged authentication, limiting exposure to authorized users only.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict privileged CLI access to trusted administrators only and monitor for suspicious CLI activity. No official patch or workaround has been published by WatchGuard at this time.