FI
Product
Fireware
by Watchguard · last CVE Sep 30, 2026
On CISA KEVExploited in the wildRansomware-linked
75
CVEs
4
On KEV
9.8
Max CVSS
14
New 30D
Severity mix
Critical 6High 37Medium 29Low 0
Watch

Add Fireware to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-14733
RansomwareIn wildKEV
9.8
29%
Dec 19
WatchGuard Firebox iked Out of Bounds Write Vulnerability
Affected: 11.10.2 before 12.5.15; 11.10.2 before 12.11.6; 2025.1 before 2025.1.4
CVE-2025-9242
In wildKEV
9.8
92%
Sep 17
WatchGuard Firebox iked Out of Bounds Write Vulnerability
Affected: 11.10.2 before 12.11.4; 11.10.2 before 12.5.13; 2025.1
CVE-2022-26318
In wildKEV
9.8
78%
Mar 4
WatchGuard Firebox and XTM Appliances Arbitrary Code Execution
Affected: 12.0.0 before 12.1.3; 12.5 before 12.5.9; 12.7.0 before 12.7.2; 12.1.3; 12.1.3; 12.1.3; +7 more
CVE-2022-23176
In wildKEV
8.8
11%
Feb 24
WatchGuard Firebox and XTM Privilege Escalation Vulnerability
Affected: 12.0.0 before 12.1.3; 12.2.0 before 12.5.7; 12.1.3; 12.1.3; 12.1.3; 12.5.7; +3 more
CVE-2026-86131
9.8
0%
Sep 29
Fireware OS Code Injection in BOVPN Over TLS Client Allows Remote Code Execution
Affected: 12.0 before 12.5.21; 12.12 before 12.12.3; 2025.0 before 2026.2.3; 2026.3 before 2026.3.2
CVE-2022-31789
9.8
2%
Sep 6
An integer overflow in WatchGuard Firebox and XTM appliances allows an unauthenticated remote attacker to trigger a buffer overflow and potentially execute arbitrary code by…
Affected: 12.0.0 before 12.1.4; 12.2.0 before 12.5.10; 12.6.1; 12.6.1; 12.6.3; 12.6.4; +4 more
CVE-2022-25361
9.1
1%
Jun 7
WatchGuard Firebox and XTM appliances allow an unauthenticated remote attacker to delete arbitrary files from a limited set of directories on the system
Affected: 12.0.0 before 12.1.3; 12.2.0 before 12.5.9; 12.1.3; 12.1.3; 12.1.3; 12.1.3; +8 more
CVE-2026-8247
8.8
0%
Jul 2
WatchGuard Firebox admd Out of Bounds Write Vulnerability
Affected: 11.0.0 before 11.12.4; 11.12.4; 11.12.4; 12.5 before 12.5.19; 2025.1 before 2026.2.1; 12.0 before 12.12.1
CVE-2022-25360
8.8
1%
Feb 24
WatchGuard Firebox and XTM appliances allow an authenticated remote attacker with unprivileged credentials to upload files to arbitrary locations
Affected: 12.0.0 before 12.1.3; 12.2.0 before 12.5.9; 12.7.0 before 12.7.2; 12.1.3; 12.1.3; 12.1.3; +9 more
CVE-2022-25293
8.8
2%
Feb 24
A systemd stack-based buffer overflow in WatchGuard Firebox and XTM appliances allows an authenticated remote attacker to potentially execute arbitrary code by initiating a…
Affected: 12.0.0 before 12.1.3; 12.2.0 before 12.5.9; 12.7.0 before 12.7.2; 12.1.3; 12.1.3; 12.1.3; +9 more
CVE-2022-25292
8.8
2%
Feb 24
A wgagent stack-based buffer overflow in WatchGuard Firebox and XTM appliances allows an authenticated remote attacker to potentially execute arbitrary code by initiating a…
Affected: 12.0.0 before 12.1.3; 12.2.0 before 12.5.9; 12.7.0 before 12.7.2; 12.1.3; 12.1.3; 12.1.3; +9 more
CVE-2022-25291
8.8
2%
Feb 24
An integer overflow in WatchGuard Firebox and XTM appliances allows an authenticated remote attacker to trigger a heap-based buffer overflow and potentially execute arbitrary code…
Affected: 12.0.0 before 12.1.3; 12.2.0 before 12.5.9; 12.7.0 before 12.7.2; 12.1.3; 12.1.3; 12.1.3; +9 more
CVE-2026-90441
8.1
0%
Sep 29
Fireware OS Missing Authorization in wgagent Management API Allows Denial of Service - Variant B
Affected: 12.0 before 12.5.21; 12.12 before 12.12.3; 2025.0 before 2026.2.3; 2026.3 before 2026.3.2
CVE-2026-86136
8.1
0%
Sep 29
Fireware OS Missing Authorization in wgagent Management API Allows Denial of Service - Variant A
Affected: 12.0 before 12.5.21; 12.12 before 12.12.3; 2025.0 before 2026.2.3; 2026.3 before 2026.3.2
CVE-2026-13368
8.1
1%
Jul 2
WatchGuard Firebox Race Condition and Use-After-Free in Mobile VPN with IKEv2 LDAP Authentication
Affected: 2025.1 before 2026.2.1; 12.5 before 12.5.19; 11.0.0 before 11.12.4; 11.12.4; 11.12.4; 12.0 before 12.12.1
CVE-2026-13079
7.8
0%
Jul 2
WatchGuard Mobile VPN with SSL Windows Client Local Privilege Escalation
Affected: 12.0.0 before 12.12.1; 2025.1 before 2026.2.1; 12.5 through 12.5.18
CVE-2022-31791
7.8
0%
Sep 6
WatchGuard Firebox and XTM appliances allow a local attacker (that has already obtained shell access) to elevate their privileges and execute code with root permissions
Affected: 12.0.0 before 12.1.4; 12.2.0 before 12.5.10; 12.6.1; 12.6.1; 12.6.3; 12.6.4; +4 more
CVE-2026-86134
7.5
0%
Sep 30
Fireware OS Pre-Authentication NULL Pointer Dereference Allows Remote Denial of Service
Affected: 12.0 before 12.5.21; 12.12 before 12.12.3; 2025.0 before 2026.2.3; 2026.3 before 2026.3.2
CVE-2026-86104
7.5
0%
Sep 29
Fireware OS Resource Exhaustion in Login Process Allows Denial of Service
Affected: 12.0 before 12.5.21; 12.12 before 12.12.3; 2025.0 before 2026.2.3; 2026.3 before 2026.3.2
CVE-2026-86133
7.5
0%
Sep 29
Fireware OS Pre-Authentication Integer Underflow in iked Allows Remote Denial of Service
Affected: 12.0 before 12.5.21; 12.12 before 12.12.3; 2025.0 before 2026.2.3; 2026.3 before 2026.3.2
CVE-2026-86132
7.5
0%
Sep 29
Fireware OS Pre-Authentication Integer Underflow in iked Allows Denial of Service
Affected: 12.0 before 12.5.21; 12.12 before 12.12.3; 2025.0 before 2026.2.3; 2026.3 before 2026.3.2
CVE-2026-86128
7.5
0%
Sep 29
Fireware OS NULL Pointer Dereference in NetFlow IPv6 Traffic Processing Allows Remote Denial of Service
Affected: 12.0 before 12.5.21; 12.12 before 12.12.3; 2025.0 before 2026.2.3; 2026.3 before 2026.3.2
CVE-2026-13084
7.5
1%
Jul 2
Null Pointer Dereference in WatchGuard Fireware OS iked Process
Affected: 12.5 before 12.5.19; 11.0.0 before 11.12.4; 11.12.4; 11.12.4; 12.0 before 12.12.1; 2025.1 before 2026.2.1
CVE-2025-1545
7.5
0%
Dec 4
An XPath Injection vulnerability in WatchGuard Fireware OS may allow a remote unauthenticated attacker to retrieve sensitive information from the Firebox configuration through an…
Affected: 2025.1 before 2025.1.3; 11.11 before 12.11.5; 11.11 before 12.5.14
CVE-2025-11838
7.5
0%
Dec 4
A memory corruption vulnerability in WatchGuard Fireware OS may allow an unauthenticated attacker to trigger a Denial of Service (DoS) condition in the Mobile User VPN with IKEv2…
Affected: 2025.1 before 2025.1.3; 12.0.0 before 12.11.5
CVE-2022-31790
7.5
2%
Sep 6
WatchGuard Firebox and XTM appliances allow an unauthenticated remote attacker to retrieve sensitive authentication server settings by sending a malicious request to exposed…
Affected: 12.0.0 before 12.1.4; 12.2.0 before 12.5.10; 12.6.1; 12.6.1; 12.6.3; 12.6.4; +4 more
CVE-2017-14616
7.5
2%
Sep 20
An FBX-5312 issue was discovered in WatchGuard Fireware before 12.0
Affected: through 11.12.4
CVE-2026-18145
7.2
0%
Sep 29
Fireware OS Stack-based Buffer Overflow in spamd Allows Remote Code Execution
Affected: 12.0 before 12.5.21; 12.12 before 12.12.3; 2025.2 before 2026.2.3; 2026.3 before 2026.3.2
CVE-2026-13046
7.2
0%
Sep 29
Fireware OS Deserialization of Untrusted Data in samld Allows Remote Code Execution
Affected: 12.0 before 12.11.10; 12.12 before 12.12.3; 2025.0 before 2026.2.3; 2026.3 before 2026.3.2
CVE-2026-13053
7.2
1%
Jul 2
WatchGuard Firebox Authenticated Out of Bounds Write in Management CLI Command Handler
Affected: 11.0 before 12.12.1; 2025.1 before 2026.2.1; 11.0 through 12.5.18
CVE-2026-13050
7.2
1%
Jul 2
WatchGuard Firebox networkd Out of Bounds Write Vulnerability
Affected: 2025.1 before 2026.2.1; 12.5 before 12.5.19; 11.0.0 before 11.12.4; 11.12.4; 11.12.4; 12.0 before 12.12.1
CVE-2026-13054
7.2
1%
Jul 2
WatchGuard Firebox Arbitrary File Write via Path Traversal in Management Web UI
Affected: 11.0 before 12.12.1; 2025.1 before 2026.2.1; 11.0 through 12.5.18
CVE-2026-13722
7.2
0%
Jul 2
WatchGuard Firebox Firmware Image Validation Bypass in WatchGuard Fireware OS
Affected: 2025.1 before 2026.2.1; 12.5 through 12.5.18; 12.0 before 12.12.1; 11.0.0 before 11.12.4; 11.12.4; 11.12.4
CVE-2026-13384
7.2
1%
Jul 2
WatchGuard Firebox wgagent Out of Bounds Write Vulnerability
Affected: 12.1 before 12.12.1; 2025.1 before 2026.2.1; 12.5 through 12.5.18
CVE-2026-13383
7.2
1%
Jul 2
WatchGuard Firebox ikestubd Out of Bounds Write Vulnerability
Affected: 12.1 before 12.12.1; 2025.1 before 2026.2.1; 12.5 through 12.5.18
CVE-2026-3987
7.2
1%
Apr 1
WatchGuard Firebox Arbitrary File Write vis Path Traversal in Fireware Web UI
Affected: 2025.1 before 2026.2; 12.6.1 before 12.12
CVE-2026-3342
7.2
7%
Mar 3
WatchGuard Firebox Out of Bounds Write Vulnerability
Affected: 12.5 before 12.5.17; 2025.1 before 2026.1.2; 11.9 before 12.11.8
CVE-2025-1547
7.2
0%
Dec 4
A stack-based buffer overflow vulnerability [CWE-121] in WatchGuard Fireware OS's certificate request command could allow an authenticated privileged user to execute arbitrary…
Affected: 12.0.0 before 12.11.3; 12.5 before 12.5.13
CVE-2025-12196
7.2
1%
Dec 4
An Out-of-bounds Write vulnerability in WatchGuard Fireware OS's CLI could allow an authenticated privileged user to execute arbitrary code via a specially crafted CLI command
Affected: 2025.1 before 2025.1.3; 12.0.0 before 12.11.5; 12.5 before 12.5.14
CVE-2025-12195
7.2
1%
Dec 4
An Out-of-bounds Write vulnerability in WatchGuard Fireware OS's CLI could allow an authenticated privileged user to execute arbitrary code via specially crafted IPSec…
Affected: 11.0 before 12.5.14; 11.0 before 12.11.5; 2025.1 before 2025.1.3
CVE-2025-12026
7.2
0%
Dec 4
An Out-of-bounds Write vulnerability in WatchGuard Fireware OS’s certificate request command could allow an authenticated privileged user to execute arbitrary code via specially…
Affected: 2025.1 before 2025.1.3; 12.0.0 before 12.11.5; 12.5 before 12.5.14
CVE-2024-5974
7.2
1%
Jul 9
A buffer overflow in WatchGuard Fireware OS could may allow an authenticated remote attacker with privileged management access to execute arbitrary code with system privileges on…
Affected: 11.9.4 before 12.5.12; 12.6 before 12.10.4; 12.5.12
CVE-2026-86105
7.1
0%
Sep 29
Fireware OS Improper Authorization in Access Portal Reverse Proxy
Affected: 12.0 before 12.5.21; 12.12 before 12.12.3; 2025.0 before 2026.2.3; 2026.3 before 2026.3.2
CVE-2026-4266
6.7
0%
Mar 30
WatchGuard Firebox Insecure Deserialization in Fireware Access Portal
Affected: 2025.1 before 2026.2; 12.1 before 12.12
CVE-2026-86101
6.5
0%
Sep 29
Fireware OS Authorization Bypass in SAML Login Allows Unauthorized SSLVPN Access
Affected: 12.0 before 12.5.21; 12.12 before 12.12.3; 2025.0 before 2026.2.3; 2026.3 before 2026.3.2
CVE-2026-18105
6.5
0%
Sep 29
Fireware OS Uncontrolled Resource Consumption in Diagnostic Tasks Allows Denial of Service
Affected: 12.0 before 12.5.21; 12.12 before 12.12.3; 2025.0 before 2026.2.3; 2026.3 before 2026.3.2
CVE-2026-4315
6.5
0%
Mar 30
WatchGuard Firebox Cross-Site Request Forgery (CSRF) in Fireware Web UI
Affected: 2025.1 before 2026.2; 12.5 before 12.5.18; 11.8 before 11.12.4; 11.12.4; 11.12.4; 12.0 before 12.12
CVE-2022-25363
6.5
1%
Feb 24
WatchGuard Firebox and XTM appliances allow an authenticated remote attacker with unprivileged credentials to modify privileged management user credentials
Affected: 12.0.0 before 12.1.3; 12.2.0 before 12.5.9; 12.7.0 before 12.7.2; 12.1.3; 12.1.3; 12.1.3; +9 more
CVE-2022-25290
6.5
1%
Feb 24
WatchGuard Firebox and XTM appliances allow an authenticated remote attacker with unprivileged credentials to retrieve certificate private keys
Affected: 12.0.0 before 12.1.3; 12.2.0 before 12.5.9; 12.7.0 before 12.7.2; 12.1.3; 12.1.3; 12.1.3; +9 more
CVE-2026-3343
6.1
0%
Mar 3
WatchGuard Firebox Reflected Cross-Site-Scripting (XSS) Vulnerability in Fireware Web UI
Affected: 12.7 before 12.11.8; 2025.1 before 2026.1.2
Page 1 of 2 · 75 total