CVE-2026-13728

UNKNOWN 0.0

WatchGuard Firebox Hardcoded Fallback Encryption Key in Access Portal Resource Credential Database

CVSS Score

0.0

EPSS Score

0.1%

EPSS Percentile

3th

In exception circumstances, WatchGuard Fireware OS on a FireCluster may use a hard-coded encryption key to encrypt saved credentials for Access Portal resources. This vulnerability does not affect devices that do not support the Access Portal feature or standalone Fireboxes not deployed in a FireCluster.

CWE	CWE-798
Vendor	watchguard
Product	fireware os
Published	Jul 2, 2026
Last Updated	Aug 10, 2026

Stay Ahead of the Next One

Get instant alerts for watchguard fireware os

Be the first to know when new unknown vulnerabilities affecting watchguard fireware os are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

Affected Versions

WatchGuard / Fireware OS

2025.1 < 2026.2.1 12.0 < 12.12.1

References

NVD ↗ CVE.org ↗ EPSS Data ↗

psirt.watchguard.com: https://psirt.watchguard.com/CVE-2026-13728 watchguard.com: https://www.watchguard.com/wgrd-psirt/advisory/wgsa-2026-00025

Credits

Cody Sixteen