Vulnerability · Published Jul 2, 2026 · Assigned by WatchGuard
CVE-2026-13722WatchGuard Firebox Firmware Image Validation Bypass in WatchGuard Fireware OS
High 8.6
In plain English
A high-severity security flaw in Fireware OS from WatchGuard. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 27% of all known vulnerabilities).
Severity (CVSS 4.0)8.6High
Exploit odds (30 days)0.3%top 73.5% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
WatchGuard Fireware OS contains a firmware validation bypass when processing a backup image via the backup/restore feature. An authenticated administrator can exploit this vulnerability to install a tampered firmware image.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| WatchGuard | Fireware OS | 2025.1 – before 2026.2.112.0 – before 12.12.111.0 – through 11.12.4+541730 |
| WatchGuard | Fireware OS | 12.0 – before 12.11.9 |
| WatchGuard | Fireware OS | 12.0 – before * |
Weakness: CWE-347 · Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
References
- https://psirt.watchguard.com/CVE-2026-13722 vendor-advisory
- https://www.watchguard.com/wgrd-psirt/advisory/wgsa-2026-00022 vendor-advisory