Vendor
WatchGuard vulnerabilities
112 advisories tracked, 4 exploited in the wild according to CISA, 77 published in 2026.
Data refreshed 13 Oct 2026
Patch now
Exploited in the last two years (CISA KEV), or a 10%+ chance of exploitation in the next 30 days (EPSS).
CVE-2025-14733Firebox and Fireware OS
WatchGuard Firebox iked Out of Bounds Write VulnerabilityCVE-2025-9242Firebox and Fireware OS
WatchGuard Firebox iked Out of Bounds Write Vulnerability
Products covered
Select a product to see only its advisories.
All tracked advisories
Newest first. Full analysis marks the CVEs we've written up in depth; the rest link to an automatic summary.
| Published | CVE | Product | Issue | Severity | EPSS | Exploited |
|---|---|---|---|---|---|---|
| CVE-2026-13043 | Endpoint and AuthPoint | WatchGuard Endpoint Security Missing Authentication in Kernel Memory Access Driver Allows Arbitrary Kernel Memory Access | CRITICAL 9.3 | 0.14% | – | |
| CVE-2026-86134 | Firebox and Fireware OS | Fireware OS Pre-Authentication NULL Pointer Dereference Allows Remote Denial of Service | HIGH 8.7 | 0.38% | – | |
| CVE-2026-86104 | Firebox and Fireware OS | Fireware OS Resource Exhaustion in Login Process Allows Denial of Service | HIGH 8.7 | 0.36% | – | |
| CVE-2026-18145 | Firebox and Fireware OS | Fireware OS Stack-based Buffer Overflow in spamd Allows Remote Code Execution | HIGH 8.6 | 0.39% | – | |
| CVE-2026-86101 | Firebox and Fireware OS | Fireware OS Authorization Bypass in SAML Login Allows Unauthorized SSLVPN Access | HIGH 7.2 | 0.22% | – | |
| CVE-2026-13046 | Firebox and Fireware OS | Fireware OS Deserialization of Untrusted Data in samld Allows Remote Code Execution | HIGH 7.5 | 0.37% | – | |
| CVE-2026-86131 | Firebox and Fireware OS | Fireware OS Code Injection in BOVPN Over TLS Client Allows Remote Code Execution | CRITICAL 9.2 | 0.42% | – | |
| CVE-2026-13224 | Firebox and Fireware OS | Fireware OS Path Traversal in WebUI Management Agent Allows Arbitrary Local File Read | HIGH 8.2 | 0.36% | – | |
| CVE-2026-86133 | Firebox and Fireware OS | Fireware OS Pre-Authentication Integer Underflow in iked Allows Remote Denial of Service | HIGH 8.2 | 0.35% | – | |
| CVE-2026-90441 | Firebox and Fireware OS | Fireware OS Missing Authorization in wgagent Management API Allows Denial of Service - Variant B | HIGH 7.1 | 0.23% | – | |
| CVE-2026-18105 | Firebox and Fireware OS | Fireware OS Uncontrolled Resource Consumption in Diagnostic Tasks Allows Denial of Service | HIGH 7.1 | 0.24% | – | |
| CVE-2026-86105 | Firebox and Fireware OS | Fireware OS Improper Authorization in Access Portal Reverse Proxy | MEDIUM 5.3 | 0.31% | – | |
| CVE-2026-86136 | Firebox and Fireware OS | Fireware OS Missing Authorization in wgagent Management API Allows Denial of Service - Variant A | HIGH 7.1 | 0.30% | – | |
| CVE-2026-86132 | Firebox and Fireware OS | Fireware OS Pre-Authentication Integer Underflow in iked Allows Denial of Service | HIGH 8.2 | 0.36% | – | |
| CVE-2026-86128 | Firebox and Fireware OS | Fireware OS NULL Pointer Dereference in NetFlow IPv6 Traffic Processing Allows Remote Denial of Service | HIGH 8.2 | 0.36% | – | |
| CVE-2026-81433 | Firebox and Fireware OS | Fireware OS Pre-Authentication Stack Buffer Overflow in fingerd Allows Remote Code Execution | HIGH 8.7 | 0.20% | – | |
| CVE-2026-95676 | Endpoint and AuthPoint | AuthPoint Gateway Improper Authentication in LDAP Sync Allows First-Factor Authentication Bypass | HIGH 7.4 | 0.38% | – | |
| CVE-2026-86135 | Firebox and Fireware OS | Dimension CSRF Vulnerability in Database Snapshot Creation Allows Denial of Service | HIGH 7 | 0.25% | – | |
| CVE-2026-78616 | Firebox and Fireware OS | Dimension Stored XSS via Trusted CA Certificate Configuration | MEDIUM 4.8 | 0.30% | – | |
| CVE-2026-78498 | Firebox and Fireware OS | Dimension Server-Side Request Forgery via Email Server Test Settings | MEDIUM 5.1 | 0.44% | – | |
| CVE-2026-78612 | Firebox and Fireware OS | Dimension SQL Injection in Scheduled Report | HIGH 8.6 | 0.71% | – | |
| CVE-2026-78103 | Firebox and Fireware OS | Dimension Log Server Configuration Lock Bypass Vulnerability | MEDIUM 5.1 | 0.49% | – | |
| CVE-2026-78615 | Firebox and Fireware OS | WatchGuard Dimension Reflected DOM-Based XSS in Report Detail Page | MEDIUM 4.6 | 0.47% | – | |
| CVE-2026-78613 | Firebox and Fireware OS | Dimension SQL Injection in Log Viewer | HIGH 8.6 | 0.62% | – | |
| CVE-2026-78495 | Firebox and Fireware OS | Dimension Server-Side Request Forgery via Remote Backup Connection Test | MEDIUM 5.3 | 0.39% | – | |
| CVE-2026-78617 | Firebox and Fireware OS | WatchGuard Dimension Web UI Authentication Brute-Force Due to Missing Rate Limiting | MEDIUM 6.3 | 0.41% | – | |
| CVE-2026-78047 | Firebox and Fireware OS | Dimension Stored XSS in Scheduled Report Task | MEDIUM 5.1 | 0.44% | – | |
| CVE-2026-78610 | Firebox and Fireware OS | Dimension CSRF Vulnerability in Administrator Passphrase Change Endpoint | HIGH 8.4 | 0.23% | – | |
| CVE-2026-78499 | Firebox and Fireware OS | Dimension SSRF via FTP Server Test Connection | MEDIUM 5.1 | 0.44% | – | |
| CVE-2026-78174 | Firebox and Fireware OS | WatchGuard Dimension Session Hijack via Exposed Session Tokens in Diagnostic Logs | CRITICAL 9.3 | 0.43% | – | |
| CVE-2026-78618 | Firebox and Fireware OS | Dimension Business Logic Flaw Allows Chained Backend Object Operations | MEDIUM 6.9 | 0.43% | – | |
| CVE-2026-78500 | Firebox and Fireware OS | Dimension Blind SSRF via Database Test Connection Feature | MEDIUM 5.1 | 0.44% | – | |
| CVE-2026-13108 | Firebox and Fireware OS | Dimension Denial-of-Service | HIGH 8.7 | 0.25% | – | |
| CVE-2026-78614 | Firebox and Fireware OS | Dimension SQL Injection in Audit Report | HIGH 8.6 | 0.71% | – | |
| CVE-2026-19315 | Firebox and Fireware OS | Fireware OS Pre-Authentication Type Confusion in iked Allows Remote Code Execution | CRITICAL 9.3 | 0.46% | – | |
| CVE-2026-78011 | Firebox and Fireware OS | Fireware OS Integer Underflow in Iked Allows Unauthenticated Denial of Service (DoS) | HIGH 8.7 | 0.54% | – | |
| CVE-2026-19314 | Firebox and Fireware OS | Fireware OS Integer Underflow in iked Allows Unauthenticated Denial of Service (DoS) | HIGH 8.7 | 0.32% | – | |
| CVE-2026-19317 | Firebox and Fireware OS | Fireware OS Pre-Authentication Out-of-Bounds Read in iked Allows Denial of Service (DoS) | HIGH 8.7 | 0.32% | – | |
| CVE-2026-78010 | Firebox and Fireware OS | Fireware OS Stack-Based Buffer Overflow in iked Allows Unauthenticated Denial of Service | HIGH 8.7 | 0.54% | – | |
| CVE-2026-13086 | Firebox and Fireware OS | Fireware OS Stack-Based Buffer Overflow in Mobile Security epm Endpoint | CRITICAL 9.3 | 0.44% | – | |
| CVE-2026-19318 | Firebox and Fireware OS | Fireware OS Pre-Authentication Stack Buffer Overflow in iked Allows Remote Code Execution | CRITICAL 9.3 | 0.47% | – | |
| CVE-2026-78009 | Firebox and Fireware OS | Fireware OS Out-of-Bounds Read in iked Allows Unauthenticated Denial of Service (DoS) | HIGH 8.7 | 0.54% | – | |
| CVE-2026-19316 | Firebox and Fireware OS | Fireware OS Pre-Authentication Double Free in iked Allows Denial of Service (DoS) | HIGH 8.7 | 0.32% | – | |
| CVE-2026-78008 | Firebox and Fireware OS | Fireware OS Authenticated Buffer Overflow in wgagent | HIGH 8.6 | 0.61% | – | |
| CVE-2026-19313 | Firebox and Fireware OS | Fireware OS Pre-Authentication Heap Buffer Overflow in iked Allows Remote Code Execution | CRITICAL 9.3 | 0.47% | – | |
| CVE-2026-81851 | Firebox and Fireware OS | Fireware OS Heap-Based Buffer Overflow in iked Allows Denial of Service | MEDIUM 6.9 | 0.41% | – | |
| CVE-2026-57910 | Endpoint and AuthPoint | WatchGuard Agent improper authentication allows unauthenticated remote code execution | CRITICAL 9.3 | 0.24% | – | |
| CVE-2026-57909 | Endpoint and AuthPoint | WatchGuard Agent path traversal allows unauthenticated remote code execution | CRITICAL 9.4 | 0.41% | – | |
| CVE-2026-13053 | Firebox and Fireware OS | WatchGuard Firebox Authenticated Out of Bounds Write in Management CLI Command Handler | HIGH 8.6 | 0.64% | – | |
| CVE-2026-13050 | Firebox and Fireware OS | WatchGuard Firebox networkd Out of Bounds Write Vulnerability | HIGH 8.6 | 0.64% | – | |
| CVE-2026-13054 | Firebox and Fireware OS | WatchGuard Firebox Arbitrary File Write via Path Traversal in Management Web UI | HIGH 8.6 | 0.60% | – | |
| CVE-2026-13079 | Firebox and Fireware OS | WatchGuard Mobile VPN with SSL Windows Client Local Privilege Escalation | HIGH 7.3 | 0.14% | – | |
| CVE-2026-8247 | Firebox and Fireware OS | WatchGuard Firebox admd Out of Bounds Write Vulnerability | HIGH 7.7 | 0.38% | – | |
| CVE-2026-13728 | Firebox and Fireware OS | WatchGuard Firebox Hardcoded Fallback Encryption Key in Access Portal Resource Credential Database | MEDIUM 5.9 | 0.23% | – | |
| CVE-2026-13084 | Firebox and Fireware OS | Null Pointer Dereference in WatchGuard Fireware OS iked Process | HIGH 8.7 | 0.61% | – | |
| CVE-2026-13368 | Firebox and Fireware OS | WatchGuard Firebox Race Condition and Use-After-Free in Mobile VPN with IKEv2 LDAP Authentication | CRITICAL 9.2 | 0.94% | – | |
| CVE-2026-13722 | Firebox and Fireware OS | WatchGuard Firebox Firmware Image Validation Bypass in WatchGuard Fireware OS | HIGH 8.6 | 0.33% | – | |
| CVE-2026-13384 | Firebox and Fireware OS | WatchGuard Firebox wgagent Out of Bounds Write Vulnerability | HIGH 8.6 | 0.72% | – | |
| CVE-2026-13383 | Firebox and Fireware OS | WatchGuard Firebox ikestubd Out of Bounds Write Vulnerability | HIGH 8.6 | 0.72% | – | |
| CVE-2026-13377 | Firebox and Fireware OS | WatchGuard Firebox Stored Cross-Site-Scripting (XSS) Vulnerability in SIP Proxy Configuration | MEDIUM 4.8 | 0.27% | – | |
| CVE-2026-13376 | Firebox and Fireware OS | WatchGuard Firebox Stored Cross-Site-Scripting (XSS) Vulnerability in spamBlocker Module | MEDIUM 4.8 | 0.27% | – | |
| CVE-2026-13375 | Firebox and Fireware OS | WatchGuard Firebox Stored Cross-Site-Scripting (XSS) Vulnerability in Autotask Technology Integration Configuration | MEDIUM 4.8 | 0.27% | – | |
| CVE-2026-13374 | Firebox and Fireware OS | WatchGuard Firebox Stored Cross-Site-Scripting (XSS) Vulnerability in ConnectWise Technology Integration Configuration | MEDIUM 4.8 | 0.27% | – | |
| CVE-2026-13373 | Firebox and Fireware OS | WatchGuard Firebox Stored Cross-Site-Scripting (XSS) Vulnerability in Tigerpaw Technology Integration Configuration | MEDIUM 4.8 | 0.27% | – | |
| CVE-2026-13371 | Firebox and Fireware OS | WatchGuard Firebox Management Web UI Denial of Service via Unsafe Deserialization | MEDIUM 6.9 | 0.59% | – | |
| CVE-2026-6788 | Endpoint and AuthPoint | Uncontrolled search path in PluginLauncher allows SYSTEM code execution in WatchGuard Agent | HIGH 8.5 | 0.18% | – | |
| CVE-2026-6787 | Endpoint and AuthPoint | Usage of a hard-coded cryptographic key in WatchGuard Agent allows inclusion of code into existing process | HIGH 8.5 | 0.16% | – | |
| CVE-2026-41286 | Endpoint and AuthPoint | Stack-based Buffer Overflow in WatchGuard Agent Discovery Service on Windows Causes Denial of Service - Variant B | HIGH 7.1 | 0.35% | – | |
| CVE-2026-41288 | Endpoint and AuthPoint | WatchGuard Agent on Windows Privilege Escalation Vulnerability | HIGH 7.3 | 0.15% | – | |
| CVE-2026-41287 | Endpoint and AuthPoint | Stack-based Buffer Overflow in WatchGuard Agent Discovery Service on Windows Causes Denial of Service - Variant A | HIGH 7.1 | 0.35% | – | |
| CVE-2026-3987 | Firebox and Fireware OS | WatchGuard Firebox Arbitrary File Write vis Path Traversal in Fireware Web UI | HIGH 8.6 | 1.1% | – | |
| CVE-2026-4315 | Firebox and Fireware OS | WatchGuard Firebox Cross-Site Request Forgery (CSRF) in Fireware Web UI | HIGH 7.1 | 0.24% | – | |
| CVE-2026-4266 | Firebox and Fireware OS | WatchGuard Firebox Insecure Deserialization in Fireware Access Portal | HIGH 8.4 | 0.39% | – | |
| CVE-2026-3344 | Firebox and Fireware OS | WatchGuard Firebox System Integrity Check Bypass | MEDIUM 6.9 | 0.45% | – | |
| CVE-2026-3343 | Firebox and Fireware OS | WatchGuard Firebox Reflected Cross-Site-Scripting (XSS) Vulnerability in Fireware Web UI | MEDIUM 5.1 | 0.34% | – | |
| CVE-2026-3342 | Firebox and Fireware OS | WatchGuard Firebox Out of Bounds Write Vulnerability | HIGH 8.6 | 0.70% | – | |
| CVE-2026-1498 | Firebox and Fireware OS | WatchGuard Firebox LDAP Injection | HIGH 7 | 0.93% | – | |
| CVE-2025-14733 | Firebox and Fireware OS | WatchGuard Firebox iked Out of Bounds Write Vulnerability | CRITICAL 9.3 | 27% | Yes · ransomware | |
| CVE-2025-1547 | Firebox and Fireware OS | WatchGuard Firebox Authenticated Stack Overflow in Certificate Request Command | HIGH 7.5 | 0.35% | – | |
| CVE-2025-1910 | Firebox and Fireware OS | WatchGuard Mobile VPN with SSL Local Privilege Escalation via Update Package | MEDIUM 6.3 | 0.27% | – | |
| CVE-2025-6946 | Firebox and Fireware OS | WatchGuard Firebox Stored Cross-Site-Scripting (XSS) Vulnerability in IPS Configuration | MEDIUM 4.8 | 0.24% | – | |
| CVE-2025-1545 | Firebox and Fireware OS | WatchGuard Firebox XPath Injection Vulnerability in Web CGI | HIGH 8.2 | 0.48% | – | |
| CVE-2025-11838 | Firebox and Fireware OS | WatchGuard Firebox iked Memory Corruption Vulnerability | HIGH 8.7 | 0.50% | – | |
| CVE-2025-13940 | Firebox and Fireware OS | WatchGuard Firebox Boot Time System Integrity Check Bypass | MEDIUM 6.7 | 0.13% | – | |
| CVE-2025-13939 | Firebox and Fireware OS | WatchGuard Firebox Stored Cross-Site-Scripting (XSS) Vulnerability in Gateway Wireless Controller | MEDIUM 4.8 | 0.20% | – | |
| CVE-2025-13938 | Firebox and Fireware OS | WatchGuard Firebox Stored Cross-Site-Scripting (XSS) Vulnerability in Autotask Technology Integration Configuration | MEDIUM 4.8 | 0.20% | – | |
| CVE-2025-13937 | Firebox and Fireware OS | WatchGuard Firebox Stored Cross-Site-Scripting (XSS) Vulnerability in ConnectWise Technology Integration Configuration | MEDIUM 4.8 | 0.20% | – | |
| CVE-2025-13936 | Firebox and Fireware OS | WatchGuard Firebox Stored Cross-Site-Scripting (XSS) Vulnerability in Tigerpaw Technology Integration Configuration | MEDIUM 4.8 | 0.20% | – | |
| CVE-2025-12196 | Firebox and Fireware OS | WatchGuard Firebox Authenticated Out of Bounds Write in Management CLI Ping Command | HIGH 8.6 | 0.62% | – | |
| CVE-2025-12195 | Firebox and Fireware OS | WatchGuard Firebox Authenticated Out of Bounds Write in Management CLI IPSec Configuration | HIGH 8.6 | 0.69% | – | |
| CVE-2025-12026 | Firebox and Fireware OS | WatchGuard Firebox Authenticated Out of Bounds Write in certd | HIGH 8.6 | 0.44% | – | |
| CVE-2025-1549 | Firebox and Fireware OS | WatchGuard Mobile VPN with SSL Local Privilege Escallation | MEDIUM 6.3 | 0.15% | – | |
| CVE-2025-4106 | Firebox and Fireware OS | WatchGuard Firebox leftover debug code vulnerability | HIGH 8.9 | 0.32% | – | |
| CVE-2025-9242 | Firebox and Fireware OS | WatchGuard Firebox iked Out of Bounds Write Vulnerability | CRITICAL 9.3 | 91% | Yes | |
| CVE-2025-6947 | Firebox and Fireware OS | WatchGuard Firebox Stored Cross-Site-Scripting (XSS) Vulnerability in SIP Proxy Configuration | MEDIUM 4.8 | 0.48% | – | |
| CVE-2025-6999 | Firebox and Fireware OS | WatchGuard Firebox Authentication Portal Request Smuggling Vulnerability | MEDIUM 6.9 | 0.45% | – | |
| CVE-2025-4805 | Firebox and Fireware OS | WatchGuard Firebox Stored Cross-Site-Scripting (XSS) Vulnerability in Acces Portal Configuration | MEDIUM 4.8 | 0.57% | – | |
| CVE-2025-4804 | Firebox and Fireware OS | WatchGuard Firebox Stored Cross-Site-Scripting (XSS) Vulnerability in Hotpot Configuration | MEDIUM 4.8 | 0.46% | – | |
| CVE-2025-2782 | Firebox and Fireware OS | WatchGuard Terminal Services Agent Local Privilege Escalation via Non-Standard Installation Directory | MEDIUM 6.3 | 0.15% | – | |
| CVE-2025-2781 | Firebox and Fireware OS | WatchGuard Mobile VPN with SSL Local Privilege Escalation via Non-Standard Installation Directory | MEDIUM 6.3 | 0.14% | – | |
| CVE-2025-0178 | Firebox and Fireware OS | WatchGaurd Firebox Host Header Injection Vulnerability | MEDIUM 5.1 | 0.24% | – | |
| CVE-2025-1239 | Firebox and Fireware OS | WatchGuard Firebox Stored Cross-Site-Scripting (XSS) Vulnerability in Blocked Sites List | MEDIUM 4.8 | 0.55% | – | |
| CVE-2025-1071 | Firebox and Fireware OS | WatchGuard Firebox Stored Cross-Site-Scripting (XSS) Vulnerability in spamBlocker Module | MEDIUM 4.8 | 0.30% | – | |
| CVE-2024-8424 | Endpoint and AuthPoint | WatchGuard Endpoint Protection Privilege Escalation in PSANHost Enables Arbitrary File Delete as SYSTEM | HIGH 8.5 | 0.19% | – | |
| CVE-2024-6594 | Firebox and Fireware OS | WatchGuard Firebox Single Sign-On Client Denial-of-Service | HIGH 8.7 | 0.64% | – | |
| CVE-2024-6593 | Firebox and Fireware OS | WatchGuard Firebox Single Sign-On Agent Management Interface Authentication Bypass | CRITICAL 9.3 | 0.58% | – | |
| CVE-2024-6592 | Firebox and Fireware OS | WatchGuard Firebox Single Sign-On Agent Protocol Authorization Bypass | CRITICAL 9.3 | 1.2% | – | |
| CVE-2024-5974 | Firebox and Fireware OS | Firebox Authenticated Buffer Overflow Vulnerability | HIGH 8.6 | 1.1% | – | |
| CVE-2024-4944 | Firebox and Fireware OS | Mobile VPN with SSL Local Privilege Escalation Vulnerability | HIGH 8.6 | 0.34% | – | |
| CVE-2024-1417 | Endpoint and AuthPoint | Local Code Injection Vulnerability in AuthPoint Password Manager App for macOS Safari | HIGH 7.8 | 0.72% | – | |
| CVE-2022-26318 | Firebox and Fireware OS | Firebox and XTM Appliances Arbitrary Code Execution | CRITICAL 9.8 | 78% | Yes | |
| CVE-2022-23176 | Firebox and Fireware OS | Firebox and XTM Privilege Escalation | HIGH 8.8 | 11% | Yes |
Sources: WatchGuard security advisories, CISA KEV and FIRST EPSS. Severity is the vendor's own rating.