CVE-2026-1498
Published: Jan 30, 2026
Modified: Feb 2, 2026
Description
An LDAP Injection vulnerability in WatchGuard Fireware OS may allow a remote unauthenticated attacker to retrieve sensitive information from a connected LDAP authentication server through an exposed authentication or management web interface. This vulnerability may also allow a remote attacker to authenticate as an LDAP user with a partial identifier if they additionally have that user's valid passphrase.This issue affects Fireware OS: from 12.0 through 12.11.6, from 12.5 through 12.5.15, from 2025.1 through 2026.0.
| Vendor | Product | Versions |
|---|---|---|
WatchGuard | Fireware OS | affected 12.0 - <= 12.11.6affected 12.5 - <= 12.5.15affected 2025.1 - <= 2026.0 |
Weaknesses (CWE)
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now