VULNERABILITY INTELLIGENCE

CVE-2026-13728

CVSS score4.4 MEDIUM
EPSS probability0.23%
CISA KEVNot currently listed
Published2026-07-03
Last modified2026-10-25
CVSS vectorCVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N

Description

In exception circumstances, WatchGuard Fireware OS on a FireCluster may use a hard-coded encryption key to encrypt saved credentials for Access Portal resources. This vulnerability does not affect devices that do not support the Access Portal feature or standalone Fireboxes not deployed in a FireCluster.

Weakness classification

  • 5d1c2695-1a31-4499-88ae-e847036fd7e3: CWE-798

Primary references