CVE-2026-13722
WatchGuard Firebox Firmware Image Validation Bypass in WatchGuard Fireware OS
Description
WatchGuard Fireware OS contains a firmware validation bypass when processing a backup image via the backup/restore feature. An authenticated administrator can exploit this vulnerability to install a tampered firmware image.This vulnerability affects Fireware OS 11.0 up to and including 11.12.4_Update1, 12.0 up to and including 12.12 and 2025.1 up to and including 2025.6.2.
INFO
Published Date :
July 2, 2026, 11:06 p.m.
Last Modified :
July 2, 2026, 11:06 p.m.
Remotely Exploit :
Yes !
Source :
WatchGuard
CVSS Scores
| Score | Version | Severity | Vector | Exploitability Score | Impact Score | Source |
|---|---|---|---|---|---|---|
| CVSS 4.0 | HIGH | 5d1c2695-1a31-4499-88ae-e847036fd7e3 |
Solution
- Update firmware to a non-vulnerable version.
- Verify firmware integrity before restoring backups.
We scan GitHub repositories to detect new proof-of-concept exploits. Following list is a collection of public exploits and proof-of-concepts, which have been published on GitHub (sorted by the most recently updated).
Results are limited to the first 15 repositories due to potential performance issues.
The following list is the news that have been mention
CVE-2026-13722 vulnerability anywhere in the article.