Product by WatchGuard
Fireware OS
74 known vulnerabilities in Fireware OS (WatchGuard), 2 of them actively exploited (CISA KEV).
Key figures
74
Vulnerabilities
2
Actively exploited (KEV)
1
Used by ransomware
8
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2025-14733 | WatchGuard Firebox iked Out of Bounds Write Vulnerability In CISA KEVRansomwarealso in 1 other product | 9.8 | |
| Critical | CVE-2025-9242 | WatchGuard Firebox iked Out of Bounds Write Vulnerability In CISA KEValso in 1 other product | 9.8 | |
| Critical | CVE-2026-13368 | WatchGuard Firebox Race Condition and Use-After-Free in Mobile VPN with IKEv2 LDAP Authentication | 8.1 | |
| High | CVE-2026-3987 | WatchGuard Firebox Arbitrary File Write vis Path Traversal in Fireware Web UI | 7.2 | |
| Critical | CVE-2026-86131 | Fireware OS Code Injection in BOVPN Over TLS Client Allows Remote Code Execution | 9.8 | |
| High | CVE-2026-78008 | Fireware OS Authenticated Buffer Overflow in wgagent | — | |
| High | CVE-2026-13384 | WatchGuard Firebox wgagent Out of Bounds Write Vulnerability | 7.2 | |
| High | CVE-2026-13383 | WatchGuard Firebox ikestubd Out of Bounds Write Vulnerability | 7.2 | |
| High | CVE-2026-78011 | Fireware OS Integer Underflow in Iked Allows Unauthenticated Denial of Service (DoS) | — | |
| High | CVE-2026-78009 | Fireware OS Out-of-Bounds Read in iked Allows Unauthenticated Denial of Service (DoS) | — | |
| High | CVE-2026-78010 | Fireware OS Stack-Based Buffer Overflow in iked Allows Unauthenticated Denial of Service | — | |
| Critical | CVE-2026-19313 | Fireware OS Pre-Authentication Heap Buffer Overflow in iked Allows Remote Code Execution | — | |
| Critical | CVE-2026-19318 | Fireware OS Pre-Authentication Stack Buffer Overflow in iked Allows Remote Code Execution | — | |
| Critical | CVE-2026-19315 | Fireware OS Pre-Authentication Type Confusion in iked Allows Remote Code Execution | — | |
| High | CVE-2026-13050 | WatchGuard Firebox networkd Out of Bounds Write Vulnerability | 7.2 | |
| High | CVE-2026-13053 | WatchGuard Firebox Authenticated Out of Bounds Write in Management CLI Command Handler | 7.2 | |
| Critical | CVE-2026-13086 | Fireware OS Stack-Based Buffer Overflow in Mobile Security epm Endpoint | — | |
| High | CVE-2026-13084 | Null Pointer Dereference in WatchGuard Fireware OS iked Process | 7.5 | |
| High | CVE-2026-13054 | WatchGuard Firebox Arbitrary File Write via Path Traversal in Management Web UI | 7.2 | |
| High | CVE-2024-5974 | Firebox Authenticated Buffer Overflow Vulnerability | 7.2 | |
| High | CVE-2026-18145 | Fireware OS Stack-based Buffer Overflow in spamd Allows Remote Code Execution | 7.2 | |
| High | CVE-2026-86134 | Fireware OS Pre-Authentication NULL Pointer Dereference Allows Remote Denial of Service | 7.5 | |
| High | CVE-2026-3342 | WatchGuard Firebox Out of Bounds Write Vulnerability | 7.2 | |
| High | CVE-2026-86104 | Fireware OS Resource Exhaustion in Login Process Allows Denial of Service | 7.5 | |
| Medium | CVE-2022-31749 | Authenticated arbitrary file read/write in WatchGuard Fireware OS | 6.5 |
News
- CISA Adds One Known Exploited Vulnerability to Catalogcisa-advisories,