Vulnerabilities CVE-2026-13728

CVE-2026-13728

Medium

Open

TLP:CLEAR

WatchGuard Firebox Hardcoded Fallback Encryption Key in Access Portal Resource Credential Database

NVD CVE.org

AI Analysis

No AI analysis yet.

Description

In exception circumstances, WatchGuard Fireware OS on a FireCluster may use a hard-coded encryption key to encrypt saved credentials for Access Portal resources. This vulnerability does not affect devices that do not support the Access Portal feature or standalone Fireboxes not deployed in a FireCluster.

Details

CVSS Score: 5.9
EPSS Score ⓘ: 0.15%

4.5th percentile
CVSS Vector: CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:H/VI:N/VA:N/SC:L/SI:N/SA:N
Confidence: 90%
Published: Jul 2, 2026
Last Modified: Aug 10, 2026

Notes

No notes yet. Click "Add Note" to create the first analysis note.

Opinions

No opinions yet. Be the first to assess this intelligence.