CVE-2026-13722

Summary

WatchGuard Fireware OS contains a firmware validation bypass when processing a backup image via the backup/restore feature. An authenticated administrator can exploit this vulnerability to install a tampered firmware image.

Affected Software

VendorProductVersion RangeStatus
WatchGuardFireware OS2025.1 < 2026.2.1affected
WatchGuardFireware OS12.0 < 12.12.1affected
WatchGuardFireware OS11.0 <= 11.12.4+541730affected
WatchGuardFireware OS12.0 < *affected

Weaknesses

  • CWE-347: CWE-347

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: total

References