CVE-2026-13046

Published: Sep 30, 2026Modified: Oct 8, 2026

7.5

Vector

CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:XShow less

Source: 5d1c2695-1a31-4499-88ae-e847036fd7e3 (Secondary)

Description

A deserialization of untrusted data vulnerability in WatchGuard Fireware OS's SAML single sign-on session handling (samld) allows an attacker who has already obtained the ability to write files on the appliance to execute arbitrary code in the context of the samld service by causing samld to load a maliciously crafted session file.

Affected (4)

Products: Watchguard: Fireware

Watchguard

1 product

Fireware

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Watchguard Fireware	12.0 ≤ version < 12.11.10
Watchguard Fireware	12.12 ≤ version < 12.12.3
Watchguard Fireware	2025.0 ≤ version < 2026.2.3
Watchguard Fireware	2026.3 ≤ version < 2026.3.2

Related CWEs

CWE-502

Deserialization of Untrusted Data

The product deserializes untrusted data without sufficiently verifying that the resulting data will be valid.

References (1)

https://psirt.watchguard.com/CVE-2026-13046

Source: 5d1c2695-1a31-4499-88ae-e847036fd7e3

PatchVendor Advisory

Timeline

No history available yet.