NetSight
high7.2

CVE-2026-13722

WatchGuard Fireware OS contains a firmware validation bypass when processing a backup image via the backup/restore feature.

Impact

WatchGuard Fireware OS contains a firmware validation bypass when processing a backup image via the backup/restore feature. An authenticated administrator can exploit this vulnerability to install a tampered firmware image.

Affected products

VendorProductAffected versions
WatchguardFireware
from 2025.1 before 2026.2.1
from 12.5 through 12.5.18
from 12.0 before 12.12.1
from 11.0.0 before 11.12.4
Version 11.12.4

Weakness classification

References