Description (CNA)
An LDAP Injection vulnerability in WatchGuard Fireware OS may allow a remote unauthenticated attacker to retrieve sensitive information from a connected LDAP authentication server through an exposed authentication or management web interface. This vulnerability may also allow a remote attacker to authenticate as an LDAP user with a partial identifier if they additionally have that user's valid passphrase.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| WatchGuard / Fireware OS | affected 2025.1 before 2026.1; affected 12.0 before 12.11.7 |
| WatchGuard / Fireware OS | affected 12.0 before 12.5.16 |
CWE
CWE-90
References
- https://psirt.watchguard.com/CVE-2026-1498
- https://www.watchguard.com/wgrd-psirt/advisory/wgsa-2026-00001
ADP enrichment
No English description supplied.
No references supplied.