WatchGuard

Products

Exploited and recent CVEs

• CVE-2025-14733 Critical 9.3 Exploited WatchGuard Firebox iked Out of Bounds Write Vulnerability 29.4%
• CVE-2025-9242 Critical 9.3 Exploited WatchGuard Firebox iked Out of Bounds Write Vulnerability 92.2%
• CVE-2026-121637 High 8.9 WatchGuard AuthPoint Gateway Improper HMAC Validation in LDAP Authentication Callback Allows Forged Authentication Results 0.3%
• CVE-2026-121639 Critical 9.2 WatchGuard AuthPoint Gateway Improper Authentication Allows Unauthenticated Denial of Service 0.7%
• CVE-2026-121638 Critical 9.1 WatchGuard AuthPoint Gateway Improper Certificate Validation Allows Man-in-the-Middle Attacks 0.3%
• CVE-2026-121640 Critical 9.1 WatchGuard AuthPoint Gateway Capture-replay Allows Unauthorized Administrative Actions 0.5%
• CVE-2026-115495 Medium 5.7 Mobile VPN with SSL Client for Windows: Cleartext Transmission of VPN Credentials over Local Management Socket <0.1%
• CVE-2026-90465 High 8.7 Fireware OS Missing Authentication in FireCluster Sync Allows Privilege Escalation 0.2%
• CVE-2026-93862 High 7.2 Fireware OS Out-of-Bounds Read in FireCluster Sync Allows Denial of Service 0.2%
• CVE-2026-112709 Critical 9.2 Fireware OS Heap Buffer Overflow in AD Authentication Service Allows Pre-Authentication Remote Code Execution 0.4%
• CVE-2026-90464 High 7.2 Fireware OS Missing Command Validation allows Authenticated Arbitrary File Modification as Root 0.4%
• CVE-2026-103593 Critical 9.1 Fireware OS Stack Buffer Overflow in Logging Service Allows Remote Code Execution 0.1%
• CVE-2026-113881 Medium 6.1 Fireware OS Stack Buffer Overflow in VPN Network Access Enforcement Allows Unprivileged Code Execution 0.4%
• CVE-2026-93434 High 8.7 Fireware OS XPath Injection in SSH Authentication Allows Blind Extraction of Configuration Secrets 0.5%
• CVE-2026-90442 High 8.6 Fireware OS Authenticated Stack Buffer Overflow in certd Allows Denial of Service 0.2%
• CVE-2026-112710 Critical 9.2 Fireware OS Heap Buffer Overflow in AD Authentication Service Allows Pre-Authentication Remote Code Execution 0.4%
• CVE-2026-82332 Medium 5.6 Fireware OS Improper Authentication in AuthPoint MFA Verification Allows Session Hijacking 0.1%
• CVE-2026-93857 Critical 9.2 Fireware OS Pre-Authentication Stack Buffer Overflow in SIP Proxy Allows Remote Code Execution 0.6%
• CVE-2026-93866 Critical 9.2 Fireware OS Pre-Authentication Integer Overflow in Access Portal Allows Out-of-Bounds Write 0.5%
• CVE-2026-93864 High 7.1 Fireware OS Link Following in firewalld Allows Local Arbitrary File Overwrite as Root 0.1%
• CVE-2026-103594 Critical 9.5 Fireware OS Stack Buffer Overflow in WireGuard Configuration Allows Remote Code Execution 0.4%
• CVE-2026-104381 Medium 6.0 Fireware OS Missing Authentication in FireCluster State Sync Allows BOVPN Tunnel Denial of Service 0.1%
• CVE-2026-111107 High 8.7 Fireware OS NULL Pointer Dereference in Management Interface Allows Unauthenticated Denial of Service 0.4%
• CVE-2026-93865 Critical 9.2 Fireware OS Missing Authentication in FireCluster Sync Daemon Allows Remote Root Action Injection 0.5%
• CVE-2026-115253 High 7.3 WatchGuard Agent Incorrect Permission Assignment in Log Directory Allows Local Log Tampering 0.1%
• CVE-2026-96293 Medium 6.9 Endpoint Security Cleartext Storage of FileVault Recovery Key in Log File <0.1%
• CVE-2026-13043 Critical 9.3 WatchGuard Endpoint Security Missing Authentication in Kernel Memory Access Driver Allows Arbitrary Kernel Memory Access 0.1%
• CVE-2026-86134 High 8.7 Fireware OS Pre-Authentication NULL Pointer Dereference Allows Remote Denial of Service 0.4%
• CVE-2026-86104 High 8.7 Fireware OS Resource Exhaustion in Login Process Allows Denial of Service 0.4%
• CVE-2026-18145 High 8.6 Fireware OS Stack-based Buffer Overflow in spamd Allows Remote Code Execution 0.4%