CVE-2026-13722

EPSS 0.27%
Veröffentlicht 02.07.2026 23:06:12
Zuletzt bearbeitet 28.08.2026 00:16:48
Erkennungen
Login

WatchGuard Firebox Firmware Image Validation Bypass in WatchGuard Fireware OS

WatchGuard Fireware OS contains a firmware validation bypass when processing a backup image via the backup/restore feature. An authenticated administrator can exploit this vulnerability to install a tampered firmware image.

Betroffene Produkte Warnungen 0 Metriken 3 CWE 1 Referenzen 5

NVD 6 VulnDex Vulnerability Enrichment 1

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Watchguard ≫ Fireware Version >= 2025.1 < 2026.2.1

   Watchguard ≫ Firebox M295 Version -
   Watchguard ≫ Firebox M395 Version -
   Watchguard ≫ Firebox M495 Version -
   Watchguard ≫ Firebox M595 Version -
   Watchguard ≫ Firebox M695 Version -
   Watchguard ≫ Firebox T115-w Version -
   Watchguard ≫ Firebox T125 Version -
   Watchguard ≫ Firebox T125-w Version -
   Watchguard ≫ Firebox T145 Version -
   Watchguard ≫ Firebox T145-w Version -
   Watchguard ≫ Firebox T185 Version -

Watchguard ≫ Fireware Version >= 12.5 <= 12.5.18

Watchguard ≫ Firebox T15 Version -
Watchguard ≫ Firebox T35 Version -

Watchguard ≫ Fireware Version >= 12.0 < 12.12.1

   Watchguard ≫ Firebox Cloud Version -
   Watchguard ≫ Firebox M270 Version -
   Watchguard ≫ Firebox M290 Version -
   Watchguard ≫ Firebox M370 Version -
   Watchguard ≫ Firebox M390 Version -
   Watchguard ≫ Firebox M440 Version -
   Watchguard ≫ Firebox M4600 Version -
   Watchguard ≫ Firebox M470 Version -
   Watchguard ≫ Firebox M4800 Version -
   Watchguard ≫ Firebox M5600 Version -
   Watchguard ≫ Firebox M570 Version -
   Watchguard ≫ Firebox M5800 Version -
   Watchguard ≫ Firebox M590 Version -
   Watchguard ≫ Firebox M670 Version -
   Watchguard ≫ Firebox M690 Version -
   Watchguard ≫ Firebox Nv5 Version -
   Watchguard ≫ Firebox T20 Version -
   Watchguard ≫ Firebox T25 Version -
   Watchguard ≫ Firebox T40 Version -
   Watchguard ≫ Firebox T45 Version -
   Watchguard ≫ Firebox T55 Version -
   Watchguard ≫ Firebox T70 Version -
   Watchguard ≫ Firebox T80 Version -
   Watchguard ≫ Firebox T85 Version -
   Watchguard ≫ Fireboxv Version -

Watchguard ≫ Fireware Version >= 11.0.0 < 11.12.4

Watchguard ≫ Fireware Version 11.12.4 Update -

Watchguard ≫ Fireware Version 11.12.4 Update u1

VulnDex Vulnerability Enrichment

Diese Information steht angemeldeten Benutzern zur Verfügung.

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.27%	0.194

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	7.2	1.2	5.9	CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
5d1c2695-1a31-4499-88ae-e847036fd7e3	8.6	0	0	CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

CWE-347 Improper Verification of Cryptographic Signature

The product does not verify, or incorrectly verifies, the cryptographic signature for data.

https://www.watchguard.com/wgrd-psirt/advisory/wgsa-2026-00022

Vendor Advisory

https://psirt.watchguard.com/CVE-2026-13722

Broken Link

https://nvd.nist.gov/vuln/detail/CVE-2026-13722

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2026-13722

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2026-13722

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2026-13722