TL;DR WatchGuard has patched seven WatchGuard Firebox vulnerabilities in its Fireware OS. The worst, CVE-2026-13368 (CVSS 9.2), lets a remote unauthenticated attacker run code on affected appliances. WatchGuard reports no exploitation in the wild, and no public proof-of-concept exists. Why It Matters Firebox appliances guard the network edge for many small and mid-sized firms. Therefore, a pre-auth flaw on this device exposes the whole perimeter.