Product by WatchGuard
WatchGuard Fireware
75 known vulnerabilities in WatchGuard Fireware (WatchGuard), 4 of them actively exploited (CISA KEV).
Key figures
75
Vulnerabilities
4
Actively exploited (KEV)
1
Used by ransomware
8
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2025-14733 | WatchGuard Firebox iked Out of Bounds Write Vulnerability In CISA KEVRansomwarealso in 1 other product | 9.8 | |
| Critical | CVE-2025-9242 | WatchGuard Firebox iked Out of Bounds Write Vulnerability In CISA KEValso in 1 other product | 9.8 | |
| Critical | CVE-2022-26318 | WatchGuard Firebox and XTM Appliances Arbitrary Code Execution In CISA KEV | 9.8 | |
| Critical | CVE-2022-23176 | WatchGuard Firebox and XTM Privilege Escalation Vulnerability In CISA KEV | 8.8 | |
| Critical | CVE-2022-31789 | Watchguard Fireware: Buffer Overflow | 9.8 | |
| High | CVE-2022-25293 | Watchguard Fireware: Stack-Based Buffer Overflow | 8.8 | |
| High | CVE-2022-25292 | Watchguard Fireware: Stack-Based Buffer Overflow | 8.8 | |
| Critical | CVE-2026-13368 | WatchGuard Firebox Race Condition and Use-After-Free in Mobile VPN with IKEv2 LDAP Authentication | 8.1 | |
| Medium | CVE-2017-8056 | Watchguard Fireware: XML External Entity (XXE) | 5.3 | |
| High | CVE-2022-25291 | Watchguard Fireware: Heap-Based Buffer Overflow | 8.8 | |
| High | CVE-2026-3987 | WatchGuard Firebox Arbitrary File Write vis Path Traversal in Fireware Web UI | 7.2 | |
| High | CVE-2022-31790 | Watchguard Fireware: security vulnerability | 7.5 | |
| Critical | CVE-2026-86131 | Fireware OS Code Injection in BOVPN Over TLS Client Allows Remote Code Execution | 9.8 | |
| High | CVE-2026-13384 | WatchGuard Firebox wgagent Out of Bounds Write Vulnerability | 7.2 | |
| High | CVE-2026-13383 | WatchGuard Firebox ikestubd Out of Bounds Write Vulnerability | 7.2 | |
| Critical | CVE-2022-25361 | Watchguard Fireware: security vulnerability | 9.1 | |
| High | CVE-2022-25360 | Watchguard Fireware: security vulnerability | 8.8 | |
| High | CVE-2017-14616 | Watchguard Fireware: security vulnerability | 7.5 | |
| High | CVE-2026-13050 | WatchGuard Firebox networkd Out of Bounds Write Vulnerability | 7.2 | |
| High | CVE-2026-13053 | WatchGuard Firebox Authenticated Out of Bounds Write in Management CLI Command Handler | 7.2 | |
| High | CVE-2026-13084 | Null Pointer Dereference in WatchGuard Fireware OS iked Process | 7.5 | |
| High | CVE-2026-13054 | WatchGuard Firebox Arbitrary File Write via Path Traversal in Management Web UI | 7.2 | |
| High | CVE-2024-5974 | Firebox Authenticated Buffer Overflow Vulnerability | 7.2 | |
| High | CVE-2026-18145 | Fireware OS Stack-based Buffer Overflow in spamd Allows Remote Code Execution | 7.2 | |
| High | CVE-2026-86134 | Fireware OS Pre-Authentication NULL Pointer Dereference Allows Remote Denial of Service | 7.5 |
News
- CISA Adds One Known Exploited Vulnerability to Catalogcisa-advisories,