CVE-2026-1498

Summary

An LDAP Injection vulnerability in WatchGuard Fireware OS may allow a remote unauthenticated attacker to retrieve sensitive information from a connected LDAP authentication server through an exposed authentication or management web interface. This vulnerability may also allow a remote attacker to authenticate as an LDAP user with a partial identifier if they additionally have that user's valid passphrase.

Affected Software

VendorProductVersion RangeStatus
WatchGuardFireware OS2025.1 < 2026.1affected
WatchGuardFireware OS12.0 < 12.11.7affected
WatchGuardFireware OS12.0 < 12.5.16affected

Weaknesses

  • CWE-90: CWE-90

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

References