CVE-2026-13084 is a high-severity vulnerability in WatchGuard Fireware OS involving a null pointer dereference triggered by malicious IKEv2 messages. It affects VPN configurations using IKEv2 with dynamic gateway peers, potentially allowing remote unauthenticated attackers to cause a denial-of-service condition by crashing the affected system. The vulnerability impacts multiple Fireware OS versions spanning from 11.10.2 up to 2026.2. No vendor-provided patch or remediation information is currently available, and no known exploits have been reported in the wild.

Successful exploitation results in a denial-of-service condition, disrupting VPN services for Mobile User VPN and Branch Office VPN configured with IKEv2 and dynamic gateway peers. This can cause network connectivity interruptions and service outages for affected Fireware OS devices.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, consider limiting exposure of affected VPN services to untrusted networks and monitor for unusual IKEv2 traffic patterns. Avoid using dynamic gateway peer configurations with IKEv2 if possible as a temporary measure.