What is GHSA-6xrf-cr85-wvqp?

GHSA-6xrf-cr85-wvqp is a security advisory published by GitHub Security Advisories with High severity. An Out-of-bounds Write vulnerability in WatchGuard Fireware OS wgagent process could allow an...

Which CVE IDs does GHSA-6xrf-cr85-wvqp cover?

GHSA-6xrf-cr85-wvqp covers the following CVE IDs: CVE-2026-13384. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

GHSA-6xrf-cr85-wvqpHigh

An Out-of-bounds Write vulnerability in WatchGuard Fireware OS wgagent process could allow an...

Vendor

GitHub Security Advisories

Published

July 3, 2026

Last Modified

July 3, 2026

🔗 CVE IDs covered (1)

CVE-2026-13384 →

📋 Description

An Out-of-bounds Write vulnerability in WatchGuard Fireware OS wgagent process could allow an authenticated privileged user to execute arbitrary code via a specially crafted requests to the Management Web UI.This vulnerability affects Fireware OS 12.1 up to and including 12.12 and 2025.1 up to and including 2026.2.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-13384
https://www.watchguard.com/wgrd-psirt/advisory/wgsa-2026-00021
https://github.com/advisories/GHSA-6xrf-cr85-wvqp