WatchGuard / Fireware
61 CVEs
| CVE ID | Description | Severity | CVSS | Published |
|---|---|---|---|---|
| CVE-2026-13053 | WatchGuard Firebox Authenticated Out of Bounds Write in Management CLI Command Handler | HIGH | 8.6 | Jul 2, 2026 |
| CVE-2026-13050 | WatchGuard Firebox networkd Out of Bounds Write Vulnerability | HIGH | 8.6 | Jul 2, 2026 |
| CVE-2026-13054 | WatchGuard Firebox Arbitrary File Write via Path Traversal in Management Web UI | HIGH | 8.6 | Jul 2, 2026 |
| CVE-2026-13079 | WatchGuard Mobile VPN with SSL Windows Client Local Privilege Escalation | HIGH | 7.3 | Jul 2, 2026 |
| CVE-2026-8247 | WatchGuard Firebox admd Out of Bounds Write Vulnerability | HIGH | 7.7 | Jul 2, 2026 |
| CVE-2026-13728 | WatchGuard Firebox Hardcoded Fallback Encryption Key in Access Portal Resource Credential Database | MEDIUM | 5.9 | Jul 2, 2026 |
| CVE-2026-13084 | Null Pointer Dereference in WatchGuard Fireware OS iked Process | HIGH | 8.7 | Jul 2, 2026 |
| CVE-2026-13368 | WatchGuard Firebox Race Condition and Use-After-Free in Mobile VPN with IKEv2 LDAP Authentication | CRITICAL | 9.2 | Jul 2, 2026 |
| CVE-2026-13722 | WatchGuard Firebox Firmware Image Validation Bypass in WatchGuard Fireware OS | HIGH | 8.6 | Jul 2, 2026 |
| CVE-2026-13384 | WatchGuard Firebox wgagent Out of Bounds Write Vulnerability | HIGH | 8.6 | Jul 2, 2026 |
| CVE-2026-13383 | WatchGuard Firebox ikestubd Out of Bounds Write Vulnerability | HIGH | 8.6 | Jul 2, 2026 |
| CVE-2026-13377 | WatchGuard Firebox Stored Cross-Site-Scripting (XSS) Vulnerability in SIP Proxy Configuration | MEDIUM | 4.8 | Jul 2, 2026 |
| CVE-2026-13376 | WatchGuard Firebox Stored Cross-Site-Scripting (XSS) Vulnerability in spamBlocker Module | MEDIUM | 4.8 | Jul 2, 2026 |
| CVE-2026-13375 | WatchGuard Firebox Stored Cross-Site-Scripting (XSS) Vulnerability in Autotask Technology Integration Configuration | MEDIUM | 4.8 | Jul 2, 2026 |
| CVE-2026-13374 | WatchGuard Firebox Stored Cross-Site-Scripting (XSS) Vulnerability in ConnectWise Technology Integration Configuration | MEDIUM | 4.8 | Jul 2, 2026 |
| CVE-2026-13373 | WatchGuard Firebox Stored Cross-Site-Scripting (XSS) Vulnerability in Tigerpaw Technology Integration Configuration | MEDIUM | 4.8 | Jul 2, 2026 |
| CVE-2026-13371 | WatchGuard Firebox Management Web UI Denial of Service via Unsafe Deserialization | MEDIUM | 6.9 | Jul 2, 2026 |
| CVE-2026-3987 | WatchGuard Firebox Arbitrary File Write vis Path Traversal in Fireware Web UI | HIGH | 8.6 | Apr 1, 2026 |
| CVE-2026-4315 | WatchGuard Firebox Cross-Site Request Forgery (CSRF) in Fireware Web UI | HIGH | 7.1 | Mar 30, 2026 |
| CVE-2026-4266 | WatchGuard Firebox Insecure Deserialization in Fireware Access Portal | HIGH | 8.4 | Mar 30, 2026 |
| CVE-2026-3344 | WatchGuard Firebox System Integrity Check Bypass | MEDIUM | 6.9 | Mar 3, 2026 |
| CVE-2026-3343 | WatchGuard Firebox Reflected Cross-Site-Scripting (XSS) Vulnerability in Fireware Web UI | MEDIUM | 5.1 | Mar 3, 2026 |
| CVE-2026-3342 | WatchGuard Firebox Out of Bounds Write Vulnerability | HIGH | 8.6 | Mar 3, 2026 |
| CVE-2025-14733 KEV | WatchGuard Firebox iked Out of Bounds Write Vulnerability | CRITICAL | 9.3 | Dec 19, 2025 |
| CVE-2025-1547 | WatchGuard Firebox Authenticated Stack Overflow in Certificate Request Command | HIGH | 7.5 | Dec 4, 2025 |
Showing 1 to 25 of 61 CVEs