WatchGuard FireWare OS iked ike2_hmac Null Pointer Dereference Denial-of-Service Vulnerability

July 15th, 2026
ZDI-26-427 ZDI-CAN-30097

CVE ID

CVE-2026-13084

CVSS Score

5.9 AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected Vendors

WatchGuard

Affected Products

FireWare OS

Vulnerability Details

This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of WatchGuard FireWare OS. Authentication is not required to exploit this vulnerability, but only systems using VPN with IKEv2 are vulnerable.

The specific flaw exists within the handling of IKEv2 IKE_AUTH messages. The issue results from dereferencing a null pointer. An attacker can leverage this vulnerability to create a denial-of-service condition on the system.

Additional Details

WatchGuard has issued an update to correct this vulnerability. More details can be found at:
https://www.watchguard.com/wgrd-psirt/advisory/wgsa-2026-00024

Disclosure Timeline

  • 2026-03-25 - Vulnerability reported to vendor
  • 2026-07-15 - Coordinated public release of advisory
  • 2026-07-15 - Advisory Updated

Credit

Nicholas Zubrisky (@NZubrisky) of TrendAI Research

Back to Advisories