INCIBE warns of seven vulnerabilities in WatchGuard Fireware OS
The INCIBE advisory covers six critical vulnerabilities and one high-severity vulnerability in Fireware OS. Models and configurations matter when choosing the fix and assessing exposure.
News summary
On 28 October, INCIBE-CERT published advisory INCIBE-2026-798 covering seven vulnerabilities in Fireware OS on Firebox devices: six critical and one high-severity. Depending on the flaw and configuration, the impact may include code execution, unauthenticated administrative actions, memory corruption or denial of service.
The specified patched versions are 2026.4 for the 2025/2026 branch, 12.12.4 for the 12.x branch and 12.5.22 for the T15 and T35 models. The bulletin should not be reduced to a claim that all devices are susceptible to the same attack from the Internet. The specific conditions of each vulnerability determine which functions and exposures need to be reviewed.
Source: INCIBE-CERT — 28 October 2026
What to review in your business
Match the model, version and configuration against the advisory's requirements. Check the corresponding patched version and save the configuration before making the change.
Review management interfaces, exposed services and remote access. After updating, check that rules and legitimate connections still work.
Concepts mentioned in this article: Vulnerability
At Seintec, we help you review affected systems and prioritise protective measures according to your environment. Contact our team.
Contact SeintecRelated service
Cybersecurity
We shield your business so it never stops.