End-of-Sale Announcement for Firebox M590/M690

We’re pleased to announce the availability of Fireware v2026.2 and Fireware 12.12, the latest feature releases for WatchGuard Firebox appliances, FireboxV, and Firebox Cloud. We are also releasing Fireware 12.5.18 for some legacy models to provide critical fixes for these appliances.

These releases introduce new secure connectivity capabilities, along with operational improvements and fixes designed to enhance reliability and simplify ongoing management.

What’s New in Fireware v2026.2 and 12.12

Firebox Gateway Support for FireCloud

The primary new feature in these releases is WireGuard® VPN-based Firebox Gateway support for FireCloud.

With this capability, a Firebox can act as a private resource gateway, allowing FireCloud‑connected users to securely access on‑premises or private network resources through the Firebox—without requiring additional servers or infrastructure.

This feature enables organizations to:

• Extend secure access to internal applications
• Leverage existing Firebox deployments
• Support modern zero‑trust and hybrid networking use cases

Note: Firebox Gateway support is available on select Firebox models. Please review the supported model list below before upgrading.

Additional Enhancements

In addition to FireCloud integration, these releases include:

• Removal of legacy software dependencies
  The Microsoft Visual C++ 2010 x86 Redistributable dependency has been removed from WatchGuard System Manager (WSM), reducing reliance on outdated components and improving overall system security.
• Updated IPSec Mobile VPN Client
  A new 64‑bit IPSec Mobile VPN Client (NCP version 15.33) is included, improving compatibility with modern operating systems and enhancing user experience.
• Bug fixes and stability improvements
  These releases address several known issues to improve reliability, upgrade quality, and day‑to‑day operation.

For a complete list of fixes and enhancements, please review the official Fireware Release Notes.

Supported Models

Fireware v2026.2 Supported Models

• T115‑W, T125 / T125‑W, T145 / T145‑W, T185
• M295, M395, M495, M595, M695

Fireware 12.12 Supported Models

• T20 / T20‑W, T40 / T40‑W, T80
• T25 / T25‑W, T45 family, T85‑PoE
• M270, M370, M470, M570, M670
• M290, M390, M590, M690
• M4600, M5600, M4800, M5800
• FireboxV
• Firebox Cloud

Fireware 12.5.18 Supported Models

• T15 / T15-W, T35-R, T35-DW

Firebox Gateway for FireCloud (12.12)

Firebox Gateway is supported on the following models running Fireware 12.12:

• T25 / T25‑W, T45 family, T85‑PoE
• M290, M390, M590, M690
• M4800, M5800
• FireboxV
• Firebox Cloud

Some older models running 12.12 do not support Firebox Gateway functionality. Fireware 12.5.18 does not support Firebox Gateway functionality.

WatchGuard System Manager Compatibility

WSM v2026.2 supports managing Firebox devices running:

• Fireware 2026.x (up to 2026.2)
• Fireware 2025.x
• Fireware 12.5 and later

Should You Upgrade?

These are feature releases, and customers should plan upgrades carefully to minimize service disruption.

You should consider upgrading if you want to take advantage of the features listed above.

As always, we recommend reviewing the release notes and scheduling upgrades during a planned maintenance window.

New Fireware versions are now available, delivering Wi-Fi 7 capabilities on the latest Firebox tabletop models, stronger default security defaults, and fixes for known issues, with high upgrade reliability across supported devices.

We are also introducing Firmware Vulnerability Alerts in WatchGuard Cloud. This is a platform-level capability that helps administrators quickly identify when a Firebox should be upgraded due to security risks identified by our Security Team.

The new firmware is now available from our Software Downloads center. 

Which products are affected by this release?

2026.1

• T115/T125/T145/T185/M295/M395/M495/M595/M695

12.11.7

• NV5/T20/T25/T40/T45/T80/T85/M270/M290/M370/M390/M470/M570/M590/M670/M690/M4600/M4800/M5600/M5800/FireboxV/FireboxCloud

12.5.16

• T15/T15-W/T35-DW/T35-R

New Firmware Vulnerability Alerts in WatchGuard Cloud

Firmware Vulnerability Alerts are a new WatchGuard Cloud capability that highlights when a Firebox is running a Fireware version affected by known security vulnerabilities.

When WatchGuard releases any Fireware update that includes a security patch, whether new or historical, WatchGuard Cloud will surface clear notifications for customers running older, affected firmware versions.

Alerts That Help You Spot Risk Faster 

• Alerts appear directly in the WatchGuard Cloud UI
• Notifications indicate severity (critical, high, medium, low)
• Alerts link to WatchGuard Security Advisories for details
• Administrators can quickly see why an upgrade is recommended
• Applies to past, current, and future Fireware releases that address security vulnerabilities

Important Notes

• This feature does not change Fireware OS or apply patches automatically
• It evaluates Fireware OS vulnerability status only, not configuration or feature risk
• Firmware Vulnerability Alerts are not supported for devices past EOL

Upgrade Now and Stay Protected

We strongly recommend that all Firebox users upgrade to this update immediately. Upgrading to the latest Fireware version is simple. Complete upgrade instructions and the firmware can be downloaded from the WatchGuard Software Downloads page. If you have Fireboxes connected to WatchGuard Cloud, you can upgrade the firmware immediately or schedule the upgrade for a future time.

For additional information on this update, please refer to the Fireware Release Notes.

Stay Informed

WatchGuard is committed to keeping our customers informed about the latest security threats. For the most up-to-date information on vulnerabilities and how WatchGuard products address them, please visit our Trust Center. Please contact your local WatchGuard representative with any additional questions about this release. For Sales or Support questions, you can find phone numbers for your region online. If you contact WatchGuard Technical Support, please have your registered appliance Serial Number or Partner ID available.

Through an internal investigation, WatchGuard has identified a new critical Fireware OS vulnerability in the IKEv2 VPN service, affecting all Firebox models and versions. A patch is now available from our Software Downloads center. 

Threat actors are attempting to exploit this vulnerability as part of a wider attack campaign against edge networking equipment and exposed infrastructure from multiple vendors. Therefore, we urge you to immediately upgrade any Firebox appliances that you own or manage.

We have reserved CVE-2025-14733 for this vulnerability. For specific information on the vulnerability, mitigation guidance, and resolution, please consult the Security Advisory (WGSA-2025-0027), which we have published in accordance with our responsible disclosure process. 

The following new firmware versions are available as of 18 December 2025 to update your Firebox appliance(s):

• Fireware 2025.1.4 or higher
• Fireware v12.11.6 or higher
• Fireware v12.5.15 or higher
• Fireware v12.3.1 Update 4 or higher

Which products are affected by this release?

Fireware 2025.1.4

• T115/T125/T145/T185/M295/M395/M495/M595/M695

Fireware 12.11.6

• NV5/T20/T25/T40/T45/T55/T70/T80/T85/M270/M290/M370/M390/M470/M570/M590/M670/M690/M4600/M4800/M5600/M5800/FireboxV/FireboxCloud

Fireware 12.5.15

• T15/T35

Fireware 12.3.1 Update 4

• T15/T35/T55/T70/M270/M370/M470/M570/M670/M4600/M5600 operating in FIPS mode for FIPS 140-2 compliance

Upgrade Now and Stay Protected

If you have any further questions, contact WatchGuard Support or your WatchGuard account representative.