Product by WatchGuard
Firebox
23 known vulnerabilities in Firebox (WatchGuard), 0 of them actively exploited (CISA KEV).
Key figures
23
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
1
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Medium | CVE-2025-26466 | Openssh: denial-of-service in openssh | 5.9 | |
| Medium | CVE-2025-26465 | Openssh: machine-in-the-middle attack if verifyhostkeydns is enabled | 6.8 | |
| Critical | CVE-2026-13368 | WatchGuard Firebox Race Condition and Use-After-Free in Mobile VPN with IKEv2 LDAP Authentication | 8.1 | |
| High | CVE-2026-13384 | WatchGuard Firebox wgagent Out of Bounds Write Vulnerability | 7.2 | |
| High | CVE-2026-13383 | WatchGuard Firebox ikestubd Out of Bounds Write Vulnerability | 7.2 | |
| High | CVE-2026-13050 | WatchGuard Firebox networkd Out of Bounds Write Vulnerability | 7.2 | |
| High | CVE-2026-13053 | WatchGuard Firebox Authenticated Out of Bounds Write in Management CLI Command Handler | 7.2 | |
| High | CVE-2026-13084 | Null Pointer Dereference in WatchGuard Fireware OS iked Process | 7.5 | |
| High | CVE-2026-13054 | WatchGuard Firebox Arbitrary File Write via Path Traversal in Management Web UI | 7.2 | |
| Medium | CVE-2026-13371 | WatchGuard Firebox Management Web UI Denial of Service via Unsafe Deserialization | 4.9 | |
| High | CVE-2026-8247 | WatchGuard Firebox admd Out of Bounds Write Vulnerability | 8.8 | |
| High | CVE-2026-13722 | WatchGuard Firebox Firmware Image Validation Bypass in WatchGuard Fireware OS | 7.2 | |
| Not rated | CVE-2002-1519 | WatchGuard Firebox: Format String | — | |
| Not rated | CVE-2002-1520 | WatchGuard Firebox: security vulnerability | — | |
| High | CVE-2026-13079 | WatchGuard Mobile VPN with SSL Windows Client Local Privilege Escalation | 7.8 | |
| Medium | CVE-2026-13728 | WatchGuard Firebox Hardcoded Fallback Encryption Key in Access Portal Resource Credential Database | 4.4 | |
| Not rated | CVE-2000-0783 | WatchGuard Firebox: Denial of Service | — | |
| Not rated | CVE-2002-1046 | WatchGuard Firebox: Denial of Service | — | |
| Medium | CVE-2026-13376 | WatchGuard Firebox Stored Cross-Site-Scripting (XSS) Vulnerability in spamBlocker Module | 4.8 | |
| Medium | CVE-2026-13375 | WatchGuard Fireware OS: Cross-site Scripting | 4.8 | |
| Medium | CVE-2026-13377 | WatchGuard Firebox Stored Cross-Site-Scripting (XSS) Vulnerability in SIP Proxy Configuration | 4.8 | |
| Medium | CVE-2026-13374 | WatchGuard Fireware OS: Cross-site Scripting | 4.8 | |
| Medium | CVE-2026-13373 | WatchGuard Fireware OS: Cross-site Scripting | 4.8 |