CVE-2026-13084 - A null pointer dereference vulnerability in WatchGuard Fireware OS may allow a remote unauthenticated attacker to create a denial-of-service (DoS) condition by sending specially crafted IKEv2 messages. This vulnerability affects both the Mobile User VPN with IKEv2 and the Branch Office VPN using IKEv2 when configured with a dynamic gateway peer. This vulnerability affects Fireware OS 11.10.2 up to and including 11.12.4_Update1, 12.0 up to and including 12.12 and 2025.1 up to an - 漏洞详情

漏洞编号：CVE-2026-13084

风险等级：高危

漏洞来源：CVE

CVE 编号：CVE-2026-13084

CNNVD 编号：-

厂商/产品：watchguard / fireware

影响范围：cpe:2.3:o:watchguard:fireware:*:*:*:*:*:*:*:*

CWE：CWE-476

发布/更新时间：2026-07-03 / 2026-08-28

漏洞描述

A null pointer dereference vulnerability in WatchGuard Fireware OS may allow a remote unauthenticated attacker to create a denial-of-service (DoS) condition by sending specially crafted IKEv2 messages. This vulnerability affects both the Mobile User VPN with IKEv2 and the Branch Office VPN using IKEv2 when configured with a dynamic gateway peer.

This vulnerability affects Fireware OS 11.10.2 up to and including 11.12.4_Update1, 12.0 up to and including 12.12 and 2025.1 up to and including 2026.2

漏洞描述

相关链接

相关漏洞