VYPR
← All advisories
Unrated severityNVD Advisory· Published Jul 2, 2026· Updated Jul 7, 2026

WatchGuard Firebox Firmware Image Validation Bypass in WatchGuard Fireware OS

CVE-2026-13722

Description

WatchGuard Fireware OS contains a firmware validation bypass when processing a backup image via the backup/restore feature. An authenticated administrator can exploit this vulnerability to install a tampered firmware image.This vulnerability affects Fireware OS 11.0 up to and including 11.12.4_Update1, 12.0 up to and including 12.12 and 2025.1 up to and including 2025.6.2.

Affected products

2
  • WatchGuard/Firewarellm-fuzzy
    Range: 11.0 - 11.12.4_Update1, 12.0 - 12.12, 2025.1 - 2025.6.2
  • WatchGuard/Fireboxllm-fuzzy
    Range: 11.0 - 11.12.4_Update1, 12.0 - 12.12, 2025.1 - 2025.6.2

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.