CVE-2026-13728
WatchGuard Firebox Hardcoded Fallback Encryption Key in Access Portal Resource Credential Database
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
In exception circumstances, WatchGuard Fireware OS on a FireCluster may use a hard-coded encryption key to encrypt saved credentials for Access Portal resources. This vulnerability affects Fireware OS 12.1 up to and including 12.12 and 2025.1 up to and including 2026.2. This vulnerability does not affect devices that do not support the Access Portal feature or standalone Fireboxes not deployed in a FireCluster.
| CWE | CWE-798 |
| Vendor | watchguard |
| Product | fireware os |
| Published | Jul 2, 2026 |
Stay Ahead of the Next One
Get instant alerts for watchguard fireware os
Be the first to know when new unknown vulnerabilities affecting watchguard fireware os are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
WatchGuard / Fireware OS
12.1 ≤ 12.12 2025.1 ≤ 2026.2
References
Credits
Cody Sixteen