FO
Product
Fireware OS
by WatchGuard · last CVE Oct 27, 2026
On CISA KEVExploited in the wildRansomware-linked
82
CVEs
2
On KEV
9.8
Max CVSS
32
New 30D
Severity mix
Critical 14High 44Medium 24Low 0
Watch

Add Fireware OS to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-14733
RansomwareIn wildKEV
9.8
29%
Dec 19
WatchGuard Firebox iked Out of Bounds Write Vulnerability
Affected: 2025.1 before 2025.1.4; 12.0 before 12.11.6; 11.10.2 through 11.12.4+541730; 12.0 before 12.3.1+728352; 12.0 before 12.5.15
CVE-2025-9242
In wildKEV
9.8
92%
Sep 17
WatchGuard Firebox iked Out of Bounds Write Vulnerability
Affected: 11.0 through 11.12.4+541730; 12.0 before 12.11.4; 2025.0 before 2025.1.1; 12.0 before 12.3.1+722811; 12.0 before 12.5.13
CVE-2026-86131
9.8
0%
Sep 29
Fireware OS Code Injection in BOVPN Over TLS Client Allows Remote Code Execution
Affected: 2026.3 before 2026.3.2; 2025.0 before 2026.2.3; 12.0 before 12.12.3; 12.0 before 12.5.21
CVE-2026-103594
New
9.5–Oct 27
Fireware OS Stack Buffer Overflow in WireGuard Configuration Allows Remote Code Execution
Affected: 2026.2 before 2026.4; 12.12 before 12.12.4
CVE-2026-90465
New
9.4–Oct 27
Fireware OS Missing Authentication in FireCluster Sync Allows Privilege Escalation
Affected: 2025.1 before 2026.4; 12.0 before 12.12.4; 12.0 before 12.5.22
CVE-2026-19315
9.3
1%
Aug 27
Fireware OS Pre-Authentication Type Confusion in iked Allows Remote Code Execution
Affected: 2025.0 before 2026.2.2; 12.0 before 12.12.2; 2026.3 before 2026.3.1; 12.0 before 12.5.20
CVE-2026-13086
9.3
1%
Aug 27
Fireware OS Stack-Based Buffer Overflow in Mobile Security epm Endpoint
Affected: 2025.0 before 2026.2.2; 12.0 before 12.12.2; 2026.3 before 2026.3.1; 12.0 before 12.5.20
CVE-2026-19313
9.3
1%
Aug 27
Fireware OS Pre-Authentication Heap Buffer Overflow in iked Allows Remote Code Execution
Affected: 2025.0 before 2026.2.2; 12.0 before 12.12.2; 12.0 before 12.5.20; 2026.3 before 2026.3.1
CVE-2026-19318
9.3
1%
Aug 27
Fireware OS Pre-Authentication Stack Buffer Overflow in iked Allows Remote Code Execution
Affected: 2025.0 before 2026.2.2; 12.0 before 12.12.2; 12.0 before 12.5.20; 2026.3 before 2026.3.1
CVE-2026-112709
New
9.2–Oct 27
Fireware OS Heap Buffer Overflow in AD Authentication Service Allows Pre-Authentication Remote Code Execution
Affected: 2025.1 before 2026.4; 12.0 before 12.12.4; 12.0 before 12.5.22
CVE-2026-112710
New
9.2–Oct 27
Fireware OS Heap Buffer Overflow in AD Authentication Service Allows Pre-Authentication Remote Code Execution
Affected: 2025.1 before 2026.4; 12.0 before 12.12.4; 12.0 before 12.5.22
CVE-2026-93857
New
9.2–Oct 27
Fireware OS Pre-Authentication Stack Buffer Overflow in SIP Proxy Allows Remote Code Execution
Affected: 2025.1 before 2026.4; 12.0 before 12.12.4; 12.0 before 12.5.22
CVE-2026-93866
New
9.2–Oct 27
Fireware OS Pre-Authentication Integer Overflow in Access Portal Allows Out-of-Bounds Write
Affected: 2025.1 before 2026.4; 12.0 before 12.12.4; 12.0 before 12.5.22
CVE-2026-93865
New
9.2–Oct 27
Fireware OS Missing Authentication in FireCluster Sync Daemon Allows Remote Root Action Injection
Affected: 2025.1 before 2026.4; 12.0 before 12.12.4; 12.0 before 12.5.22
CVE-2025-4106
8.9
0%
Oct 24
WatchGuard Firebox leftover debug code vulnerability
Affected: 12.0 before 12.11.3; 12.0 before 12.5.13
CVE-2026-8247
8.8
0%
Jul 2
WatchGuard Firebox admd Out of Bounds Write Vulnerability
Affected: 2025.1 before 2026.2.1; 12.0 before 12.12.1; 11.0; 12.0 before 12.11.9; 12.0 before 12.5.19
CVE-2026-93434
New
8.7–Oct 27
Fireware OS XPath Injection in SSH Authentication Allows Blind Extraction of Configuration Secrets
Affected: 12.0 before 12.5.22; 2025.1 before 2026.4; 12.0 before 12.12.4
CVE-2026-111107
New
8.7–Oct 27
Fireware OS NULL Pointer Dereference in Management Interface Allows Unauthenticated Denial of Service
Affected: 2025.1 before 2026.4; 12.0 before 12.12.4; 12.0 before 12.5.22
CVE-2026-81433
8.7
0%
Sep 29
Fireware OS Pre-Authentication Stack Buffer Overflow in fingerd Allows Remote Code Execution
Affected: 2026.3 before 2026.3.2; 2025.0 before 2026.2.3; 12.0 before 12.12.3
CVE-2026-19314
8.7
1%
Aug 27
Fireware OS Integer Underflow in iked Allows Unauthenticated Denial of Service (DoS)
Affected: 2025.0 before 2026.2.2; 12.0 before 12.12.2; 2026.3 before 2026.3.1; 12.0 before 12.5.20
CVE-2026-19317
8.7
1%
Aug 27
Fireware OS Pre-Authentication Out-of-Bounds Read in iked Allows Denial of Service (DoS)
Affected: 2025.0 before 2026.2.2; 12.0 before 12.12.2; 2026.3 before 2026.3.1; 12.0 before 12.5.20
CVE-2026-78011
8.7
1%
Aug 27
Fireware OS Integer Underflow in Iked Allows Unauthenticated Denial of Service (DoS)
Affected: 2025.0 before 2026.2.2; 12.0 before 12.12.2; 2026.3 before 2026.3.1; 12.0 before 12.5.20
CVE-2026-78010
8.7
1%
Aug 27
Fireware OS Stack-Based Buffer Overflow in iked Allows Unauthenticated Denial of Service
Affected: 2025.0 before 2026.2.2; 12.0 before 12.12.2; 2026.3 before 2026.3.1; 12.0 before 12.5.20
CVE-2026-19316
8.7
1%
Aug 27
Fireware OS Pre-Authentication Double Free in iked Allows Denial of Service (DoS)
Affected: 2025.0 before 2026.2.2; 12.0 before 12.12.2; 2026.3 before 2026.3.1; 12.0 before 12.5.20
CVE-2026-78009
8.7
1%
Aug 27
Fireware OS Out-of-Bounds Read in iked Allows Unauthenticated Denial of Service (DoS)
Affected: 2025.0 before 2026.2.2; 12.0 before 12.12.2; 2026.3 before 2026.3.1; 12.0 before 12.5.20
CVE-2026-90442
New
8.6–Oct 27
Fireware OS Authenticated Stack Buffer Overflow in certd Allows Denial of Service
Affected: 2025.1 before 2026.4; 12.0 before 12.12.4; 12.0 before 12.5.22
CVE-2026-78008
8.6
1%
Aug 27
Fireware OS Authenticated Buffer Overflow in wgagent
Affected: 2025.0 before 2026.2.2; 12.0 before 12.12.2; 2026.3 before 2026.3.1; 12.0 before 12.5.20
CVE-2026-90441
8.1
0%
Sep 29
Fireware OS Missing Authorization in wgagent Management API Allows Denial of Service - Variant B
Affected: 2026.3 before 2026.3.2; 2025.0 before 2026.2.3; 12.0 before 12.12.3; 12.0 before 12.5.21
CVE-2026-86136
8.1
0%
Sep 29
Fireware OS Missing Authorization in wgagent Management API Allows Denial of Service - Variant A
Affected: 2026.0 before 2026.3.2; 2025.0 before 2026.2.3; 12.0 before 12.12.3; 12.0 before 12.5.21
CVE-2026-13368
8.1
1%
Jul 2
WatchGuard Firebox Race Condition and Use-After-Free in Mobile VPN with IKEv2 LDAP Authentication
Affected: 2025.1 before 2026.2.1; 12.0 before 12.11.9; 12.0 before 12.5.19
CVE-2026-86134
7.5
0%
Sep 30
Fireware OS Pre-Authentication NULL Pointer Dereference Allows Remote Denial of Service
Affected: 2026.3 before 2026.3.2; 2025.0 before 2026.2.3; 12.0 before 12.12.3; 12.0 before 12.5.21
CVE-2026-86104
7.5
0%
Sep 29
Fireware OS Resource Exhaustion in Login Process Allows Denial of Service
Affected: 2026.3 before 2026.3.2; 2025.0 before 2026.2.3; 12.0 before 12.12.3; 12.0 before 12.5.21
CVE-2026-86133
7.5
0%
Sep 29
Fireware OS Pre-Authentication Integer Underflow in iked Allows Remote Denial of Service
Affected: 2026.3 before 2026.3.2; 2025.0 before 2026.2.3; 12.0 before 12.12.3; 12.0 before 12.5.21
CVE-2026-86132
7.5
0%
Sep 29
Fireware OS Pre-Authentication Integer Underflow in iked Allows Denial of Service
Affected: 2026.3 before 2026.3.2; 2025.0 before 2026.2.3; 12.0 before 12.12.3; 12.0 before 12.5.21
CVE-2026-86128
7.5
0%
Sep 29
Fireware OS NULL Pointer Dereference in NetFlow IPv6 Traffic Processing Allows Remote Denial of Service
Affected: 2026.3 before 2026.3.2; 2025.0 before 2026.2.3; 12.0 before 12.12.3; 12.0 before 12.5.21
CVE-2026-13084
7.5
1%
Jul 2
Null Pointer Dereference in WatchGuard Fireware OS iked Process
Affected: 2025.1 before 2026.2.1; 12.0 before 12.12.1; 11.10.2; 12.0 before 12.11.9; 12.0 before 12.5.19
CVE-2025-1545
7.5
0%
Dec 4
WatchGuard Firebox XPath Injection Vulnerability in Web CGI
Affected: 2025.1 before 2025.1.3; 12.0 before 12.11.5; 11.11 through 11.12.4+541730; 12.0 before 12.5.14
CVE-2025-11838
7.5
0%
Dec 4
WatchGuard Firebox iked Memory Corruption Vulnerability
Affected: 2025.1 through 2025.1.3; 12.6.1 through 12.11.5
CVE-2026-93862
New
7.2–Oct 27
Fireware OS Out-of-Bounds Read in FireCluster Sync Allows Denial of Service
Affected: 2025.1 before 2026.4; 12.0 before 12.12.4; 12.0 before 12.5.22
CVE-2026-90464
New
7.2–Oct 27
Fireware OS Missing Command Validation allows Authenticated Arbitrary File Modification as Root
Affected: 2025.1 before 2026.4; 12.0 before 12.12.4; 12.0 before 12.5.22
CVE-2026-18145
7.2
0%
Sep 29
Fireware OS Stack-based Buffer Overflow in spamd Allows Remote Code Execution
Affected: 2026.3 before 2026.3.2; 2025.0 before 2026.2.3; 12.0 before 12.12.3; 12.0 before 12.5.21
CVE-2026-13046
7.2
0%
Sep 29
Fireware OS Deserialization of Untrusted Data in samld Allows Remote Code Execution
Affected: 2026.3 before 2026.3.2; 2025.0 before 2026.2.3; 12.0 before 12.12.3; 12.11 before 12.11.10
CVE-2026-13053
7.2
1%
Jul 2
WatchGuard Firebox Authenticated Out of Bounds Write in Management CLI Command Handler
Affected: 2025.1 before 2026.2.1; 12.0 before 12.12.1; 11.0; 12.0 before 12.11.9; 12.0 before 12.5.19
CVE-2026-13050
7.2
1%
Jul 2
WatchGuard Firebox networkd Out of Bounds Write Vulnerability
Affected: 2025.1 before 2026.2.1; 12.0 before 12.12.1; 11.8; 12.0 before 12.11.9; 12.0 before 12.5.19
CVE-2026-13054
7.2
1%
Jul 2
WatchGuard Firebox Arbitrary File Write via Path Traversal in Management Web UI
Affected: 2025.1 before 2026.2.1; 12.0 before 12.12.1; 11.0; 12.0 before 12.11.9; 12.0 before 12.5.19
CVE-2026-13722
7.2
0%
Jul 2
WatchGuard Firebox Firmware Image Validation Bypass in WatchGuard Fireware OS
Affected: 2025.1 before 2026.2.1; 12.0 before 12.12.1; 11.0 through 11.12.4+541730; 12.0 before 12.11.9; 12.0
CVE-2026-13384
7.2
1%
Jul 2
WatchGuard Firebox wgagent Out of Bounds Write Vulnerability
Affected: 2025.1 before 2026.2.1; 12.1 before 12.12.1; 12.1 before 12.11.9; 12.1 before 12.5.19
CVE-2026-13383
7.2
1%
Jul 2
WatchGuard Firebox ikestubd Out of Bounds Write Vulnerability
Affected: 2025.1 before 2026.2.1; 12.1 before 12.12.1; 12.1 before 12.11.9; 12.1 before 12.5.19
CVE-2026-3987
7.2
1%
Apr 1
WatchGuard Firebox Arbitrary File Write vis Path Traversal in Fireware Web UI
Affected: 2025.1 before 2026.2; 12.6.1 before 12.12
CVE-2026-3342
7.2
7%
Mar 3
WatchGuard Firebox Out of Bounds Write Vulnerability
Affected: 11.9 through 11.12.4+541730; 12.0 through 12.11.7; 12.5 through 12.5.16; 2025.1 through 2026.1.1
Page 1 of 2 · 82 total