Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.

CVE-2026-1498 Details

ANALYZED

This CVE record has been analyzed and enriched by NVDAPI.com as an independent party.

Description

An LDAP Injection vulnerability in WatchGuard Fireware OS may allow a remote unauthenticated attacker to retrieve sensitive information from a connected LDAP authentication server through an exposed authentication or management web interface. This vulnerability may also allow a remote attacker to authenticate as an LDAP user with a partial identifier if they additionally have that user's valid passphrase.

Metrics

CVSS 3.x Severity and Vector Strings:

VolerionCVSS-B:6.8 MEDIUMVector:CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URL	Source(s)	Tag(s)
https://psirt.watchguard.com/CVE-2026-1498	WatchGuard Technologies, Inc.
https://www.watchguard.com/wgrd-psirt/advisory/wgsa-2026-00001	WatchGuard Technologies, Inc.	AdvisoryRemedyVendor

Weakness Enumeration

CWE-ID	CWE Name	Source
CWE-90	Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection')	WatchGuard Technologies, Inc.

Affected Products

Product	Versions
WatchGuard Fireware OS	>= 12, <= 12.11.6 >= 2025.1, <= 2025.1.4
CPE cpe:2.3:o:watchguard:fireware:::::::: Remediation Upgrade: 12.11.7moderate effort Upgrade: 2026.1moderate effort Upgrade: 12.5.16moderate effort
WatchGuard Firebox T15	All versions
CPE cpe:2.3:h:watchguard:firebox_t15:::::::: cpe:2.3:h:watchguard:firebox_t15-w:::::::: Remediation No remediation found in references.
WatchGuard Firebox T35	All versions
CPE cpe:2.3:h:watchguard:firebox_t35:::::::: cpe:2.3:h:watchguard:firebox_t35-r:::::::: cpe:2.3:h:watchguard:firebox_t35-w:::::::: Remediation No remediation found in references.
WatchGuard Firebox T115-W	All versions
CPE No CPEs found in CPE dictionary for this product. Remediation No remediation found in references.
WatchGuard Firebox T125	All versions
CPE cpe:2.3:h:watchguard:firebox_t125:::::::: Remediation No remediation found in references.
WatchGuard Firebox T125-W	All versions
CPE cpe:2.3:h:watchguard:firebox_t125-w:::::::: Remediation No remediation found in references.
WatchGuard Firebox T145	All versions
CPE cpe:2.3:h:watchguard:firebox_t145:::::::: Remediation No remediation found in references.
WatchGuard Firebox T145-W	All versions
CPE cpe:2.3:h:watchguard:firebox_t145-w:::::::: Remediation No remediation found in references.
WatchGuard Firebox T185	All versions
CPE cpe:2.3:h:watchguard:firebox_t185:::::::: Remediation No remediation found in references.
WatchGuard Firebox M295	All versions
CPE cpe:2.3:h:watchguard:firebox_m295:::::::: Remediation No remediation found in references.
WatchGuard Firebox M395	All versions
CPE cpe:2.3:h:watchguard:firebox_m395:::::::: Remediation No remediation found in references.
WatchGuard Firebox M495	All versions
CPE cpe:2.3:h:watchguard:firebox_m495:::::::: Remediation No remediation found in references.
WatchGuard Firebox M595	All versions
CPE cpe:2.3:h:watchguard:firebox_m595:::::::: Remediation No remediation found in references.
WatchGuard Firebox M695	All versions
CPE cpe:2.3:h:watchguard:firebox_m695:::::::: Remediation No remediation found in references.
WatchGuard Firebox T20	All versions
CPE cpe:2.3:h:watchguard:firebox_t20:::::::: Remediation No remediation found in references.
WatchGuard Firebox T25	All versions
CPE cpe:2.3:h:watchguard:firebox_t25:::::::: Remediation No remediation found in references.
WatchGuard Firebox T40	All versions
CPE cpe:2.3:h:watchguard:firebox_t40:::::::: Remediation No remediation found in references.
WatchGuard Firebox T45	All versions
CPE cpe:2.3:h:watchguard:firebox_t45:::::::: Remediation No remediation found in references.
WatchGuard Firebox T55	All versions
CPE cpe:2.3:h:watchguard:firebox_t55:::::::: Remediation No remediation found in references.
WatchGuard Firebox T70	All versions
CPE cpe:2.3:h:watchguard:firebox_t70:::::::: Remediation No remediation found in references.
WatchGuard Firebox T80	All versions
CPE cpe:2.3:h:watchguard:firebox_t80:::::::: Remediation No remediation found in references.
WatchGuard Firebox T85	All versions
CPE cpe:2.3:h:watchguard:firebox_t85:::::::: Remediation No remediation found in references.
WatchGuard Firebox M270	All versions
CPE cpe:2.3:h:watchguard:firebox_m270:::::::: Remediation No remediation found in references.
WatchGuard Firebox M290	All versions
CPE cpe:2.3:h:watchguard:firebox_m290:::::::: Remediation No remediation found in references.
WatchGuard Firebox M370	All versions
CPE cpe:2.3:h:watchguard:firebox_m370:::::::: Remediation No remediation found in references.
WatchGuard Firebox M390	All versions
CPE cpe:2.3:h:watchguard:firebox_m390:::::::: Remediation No remediation found in references.
WatchGuard Firebox M470	All versions
CPE cpe:2.3:h:watchguard:firebox_m470:::::::: Remediation No remediation found in references.
WatchGuard Firebox M570	All versions
CPE cpe:2.3:h:watchguard:firebox_m570:::::::: Remediation No remediation found in references.
WatchGuard Firebox M590	All versions
CPE cpe:2.3:h:watchguard:firebox_m590:::::::: Remediation No remediation found in references.
WatchGuard Firebox M670	All versions
CPE cpe:2.3:h:watchguard:firebox_m670:::::::: Remediation No remediation found in references.
WatchGuard Firebox M690	All versions
CPE cpe:2.3:h:watchguard:firebox_m690:::::::: Remediation No remediation found in references.
WatchGuard Firebox M440	All versions
CPE cpe:2.3:h:watchguard:firebox_m440:::::::: Remediation No remediation found in references.
WatchGuard Firebox M4600	All versions
CPE cpe:2.3:h:watchguard:firebox_m4600:::::::: Remediation No remediation found in references.
WatchGuard Firebox M4800	All versions
CPE cpe:2.3:h:watchguard:firebox_m4800:::::::: Remediation No remediation found in references.
WatchGuard Firebox M5600	All versions
CPE cpe:2.3:h:watchguard:firebox_m5600:::::::: Remediation No remediation found in references.
WatchGuard Firebox M5800	All versions
CPE cpe:2.3:h:watchguard:firebox_m5800:::::::: Remediation No remediation found in references.
WatchGuard Firebox Cloud	All versions
CPE cpe:2.3:h:watchguard:fireboxcloud:::::::: Remediation No remediation found in references.
WatchGuard Firebox NV5	All versions
CPE cpe:2.3:h:watchguard:firebox_nv5:::::::: Remediation No remediation found in references.
WatchGuard FireboxV	All versions
CPE cpe:2.3:h:watchguard:fireboxv:::::::: Remediation No remediation found in references.

Change History

4 change records found show changes

Date	Action	Recorded By
Aug 10, 2026	CVE Modified	WatchGuard Technologies, Inc.
Jun 17, 2026	CVE Modified	WatchGuard Technologies, Inc.
Jun 17, 2026	CVE Modified	CISA-ADP
Jan 30, 2026	New CVE Received	WatchGuard Technologies, Inc.

CVE-2026-1498 Details

ANALYZED

Description

Metrics

References to Advisories, Solutions, and Tools

Weakness Enumeration

Affected Products

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE