FO
Product
Fireware OS
On CISA KEVExploited in the wildRansomware-linked
82
CVEs
2
On KEV
9.8
Max CVSS
32
New 30D
Severity mix
Critical 14High 44Medium 24Low 0
Watch
Add Fireware OS to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-14733 RansomwareIn wildKEV | 9.8 | Dec 19 | WatchGuard Firebox iked Out of Bounds Write Vulnerability Affected: 2025.1 before 2025.1.4; 12.0 before 12.11.6; 11.10.2 through 11.12.4+541730; 12.0 before 12.3.1+728352; 12.0 before 12.5.15 |
| CVE-2025-9242 In wildKEV | 9.8 | Sep 17 | WatchGuard Firebox iked Out of Bounds Write Vulnerability Affected: 11.0 through 11.12.4+541730; 12.0 before 12.11.4; 2025.0 before 2025.1.1; 12.0 before 12.3.1+722811; 12.0 before 12.5.13 |
| CVE-2026-86131 | 9.8 | Sep 29 | Fireware OS Code Injection in BOVPN Over TLS Client Allows Remote Code Execution Affected: 2026.3 before 2026.3.2; 2025.0 before 2026.2.3; 12.0 before 12.12.3; 12.0 before 12.5.21 |
| CVE-2026-103594 New | 9.5 | Oct 27 | Fireware OS Stack Buffer Overflow in WireGuard Configuration Allows Remote Code Execution Affected: 2026.2 before 2026.4; 12.12 before 12.12.4 |
| CVE-2026-90465 New | 9.4 | Oct 27 | Fireware OS Missing Authentication in FireCluster Sync Allows Privilege Escalation Affected: 2025.1 before 2026.4; 12.0 before 12.12.4; 12.0 before 12.5.22 |
| CVE-2026-19315 | 9.3 | Aug 27 | Fireware OS Pre-Authentication Type Confusion in iked Allows Remote Code Execution Affected: 2025.0 before 2026.2.2; 12.0 before 12.12.2; 2026.3 before 2026.3.1; 12.0 before 12.5.20 |
| CVE-2026-13086 | 9.3 | Aug 27 | Fireware OS Stack-Based Buffer Overflow in Mobile Security epm Endpoint Affected: 2025.0 before 2026.2.2; 12.0 before 12.12.2; 2026.3 before 2026.3.1; 12.0 before 12.5.20 |
| CVE-2026-19313 | 9.3 | Aug 27 | Fireware OS Pre-Authentication Heap Buffer Overflow in iked Allows Remote Code Execution Affected: 2025.0 before 2026.2.2; 12.0 before 12.12.2; 12.0 before 12.5.20; 2026.3 before 2026.3.1 |
| CVE-2026-19318 | 9.3 | Aug 27 | Fireware OS Pre-Authentication Stack Buffer Overflow in iked Allows Remote Code Execution Affected: 2025.0 before 2026.2.2; 12.0 before 12.12.2; 12.0 before 12.5.20; 2026.3 before 2026.3.1 |
| CVE-2026-112709 New | 9.2 | Oct 27 | Fireware OS Heap Buffer Overflow in AD Authentication Service Allows Pre-Authentication Remote Code Execution Affected: 2025.1 before 2026.4; 12.0 before 12.12.4; 12.0 before 12.5.22 |
| CVE-2026-112710 New | 9.2 | Oct 27 | Fireware OS Heap Buffer Overflow in AD Authentication Service Allows Pre-Authentication Remote Code Execution Affected: 2025.1 before 2026.4; 12.0 before 12.12.4; 12.0 before 12.5.22 |
| CVE-2026-93857 New | 9.2 | Oct 27 | Fireware OS Pre-Authentication Stack Buffer Overflow in SIP Proxy Allows Remote Code Execution Affected: 2025.1 before 2026.4; 12.0 before 12.12.4; 12.0 before 12.5.22 |
| CVE-2026-93866 New | 9.2 | Oct 27 | Fireware OS Pre-Authentication Integer Overflow in Access Portal Allows Out-of-Bounds Write Affected: 2025.1 before 2026.4; 12.0 before 12.12.4; 12.0 before 12.5.22 |
| CVE-2026-93865 New | 9.2 | Oct 27 | Fireware OS Missing Authentication in FireCluster Sync Daemon Allows Remote Root Action Injection Affected: 2025.1 before 2026.4; 12.0 before 12.12.4; 12.0 before 12.5.22 |
| CVE-2025-4106 | 8.9 | Oct 24 | WatchGuard Firebox leftover debug code vulnerability Affected: 12.0 before 12.11.3; 12.0 before 12.5.13 |
| CVE-2026-8247 | 8.8 | Jul 2 | WatchGuard Firebox admd Out of Bounds Write Vulnerability Affected: 2025.1 before 2026.2.1; 12.0 before 12.12.1; 11.0; 12.0 before 12.11.9; 12.0 before 12.5.19 |
| CVE-2026-93434 New | 8.7 | Oct 27 | Fireware OS XPath Injection in SSH Authentication Allows Blind Extraction of Configuration Secrets Affected: 12.0 before 12.5.22; 2025.1 before 2026.4; 12.0 before 12.12.4 |
| CVE-2026-111107 New | 8.7 | Oct 27 | Fireware OS NULL Pointer Dereference in Management Interface Allows Unauthenticated Denial of Service Affected: 2025.1 before 2026.4; 12.0 before 12.12.4; 12.0 before 12.5.22 |
| CVE-2026-81433 | 8.7 | Sep 29 | Fireware OS Pre-Authentication Stack Buffer Overflow in fingerd Allows Remote Code Execution Affected: 2026.3 before 2026.3.2; 2025.0 before 2026.2.3; 12.0 before 12.12.3 |
| CVE-2026-19314 | 8.7 | Aug 27 | Fireware OS Integer Underflow in iked Allows Unauthenticated Denial of Service (DoS) Affected: 2025.0 before 2026.2.2; 12.0 before 12.12.2; 2026.3 before 2026.3.1; 12.0 before 12.5.20 |
| CVE-2026-19317 | 8.7 | Aug 27 | Fireware OS Pre-Authentication Out-of-Bounds Read in iked Allows Denial of Service (DoS) Affected: 2025.0 before 2026.2.2; 12.0 before 12.12.2; 2026.3 before 2026.3.1; 12.0 before 12.5.20 |
| CVE-2026-78011 | 8.7 | Aug 27 | Fireware OS Integer Underflow in Iked Allows Unauthenticated Denial of Service (DoS) Affected: 2025.0 before 2026.2.2; 12.0 before 12.12.2; 2026.3 before 2026.3.1; 12.0 before 12.5.20 |
| CVE-2026-78010 | 8.7 | Aug 27 | Fireware OS Stack-Based Buffer Overflow in iked Allows Unauthenticated Denial of Service Affected: 2025.0 before 2026.2.2; 12.0 before 12.12.2; 2026.3 before 2026.3.1; 12.0 before 12.5.20 |
| CVE-2026-19316 | 8.7 | Aug 27 | Fireware OS Pre-Authentication Double Free in iked Allows Denial of Service (DoS) Affected: 2025.0 before 2026.2.2; 12.0 before 12.12.2; 2026.3 before 2026.3.1; 12.0 before 12.5.20 |
| CVE-2026-78009 | 8.7 | Aug 27 | Fireware OS Out-of-Bounds Read in iked Allows Unauthenticated Denial of Service (DoS) Affected: 2025.0 before 2026.2.2; 12.0 before 12.12.2; 2026.3 before 2026.3.1; 12.0 before 12.5.20 |
| CVE-2026-90442 New | 8.6 | Oct 27 | Fireware OS Authenticated Stack Buffer Overflow in certd Allows Denial of Service Affected: 2025.1 before 2026.4; 12.0 before 12.12.4; 12.0 before 12.5.22 |
| CVE-2026-78008 | 8.6 | Aug 27 | Fireware OS Authenticated Buffer Overflow in wgagent Affected: 2025.0 before 2026.2.2; 12.0 before 12.12.2; 2026.3 before 2026.3.1; 12.0 before 12.5.20 |
| CVE-2026-90441 | 8.1 | Sep 29 | Fireware OS Missing Authorization in wgagent Management API Allows Denial of Service - Variant B Affected: 2026.3 before 2026.3.2; 2025.0 before 2026.2.3; 12.0 before 12.12.3; 12.0 before 12.5.21 |
| CVE-2026-86136 | 8.1 | Sep 29 | Fireware OS Missing Authorization in wgagent Management API Allows Denial of Service - Variant A Affected: 2026.0 before 2026.3.2; 2025.0 before 2026.2.3; 12.0 before 12.12.3; 12.0 before 12.5.21 |
| CVE-2026-13368 | 8.1 | Jul 2 | WatchGuard Firebox Race Condition and Use-After-Free in Mobile VPN with IKEv2 LDAP Authentication Affected: 2025.1 before 2026.2.1; 12.0 before 12.11.9; 12.0 before 12.5.19 |
| CVE-2026-86134 | 7.5 | Sep 30 | Fireware OS Pre-Authentication NULL Pointer Dereference Allows Remote Denial of Service Affected: 2026.3 before 2026.3.2; 2025.0 before 2026.2.3; 12.0 before 12.12.3; 12.0 before 12.5.21 |
| CVE-2026-86104 | 7.5 | Sep 29 | Fireware OS Resource Exhaustion in Login Process Allows Denial of Service Affected: 2026.3 before 2026.3.2; 2025.0 before 2026.2.3; 12.0 before 12.12.3; 12.0 before 12.5.21 |
| CVE-2026-86133 | 7.5 | Sep 29 | Fireware OS Pre-Authentication Integer Underflow in iked Allows Remote Denial of Service Affected: 2026.3 before 2026.3.2; 2025.0 before 2026.2.3; 12.0 before 12.12.3; 12.0 before 12.5.21 |
| CVE-2026-86132 | 7.5 | Sep 29 | Fireware OS Pre-Authentication Integer Underflow in iked Allows Denial of Service Affected: 2026.3 before 2026.3.2; 2025.0 before 2026.2.3; 12.0 before 12.12.3; 12.0 before 12.5.21 |
| CVE-2026-86128 | 7.5 | Sep 29 | Fireware OS NULL Pointer Dereference in NetFlow IPv6 Traffic Processing Allows Remote Denial of Service Affected: 2026.3 before 2026.3.2; 2025.0 before 2026.2.3; 12.0 before 12.12.3; 12.0 before 12.5.21 |
| CVE-2026-13084 | 7.5 | Jul 2 | Null Pointer Dereference in WatchGuard Fireware OS iked Process Affected: 2025.1 before 2026.2.1; 12.0 before 12.12.1; 11.10.2; 12.0 before 12.11.9; 12.0 before 12.5.19 |
| CVE-2025-1545 | 7.5 | Dec 4 | WatchGuard Firebox XPath Injection Vulnerability in Web CGI Affected: 2025.1 before 2025.1.3; 12.0 before 12.11.5; 11.11 through 11.12.4+541730; 12.0 before 12.5.14 |
| CVE-2025-11838 | 7.5 | Dec 4 | WatchGuard Firebox iked Memory Corruption Vulnerability Affected: 2025.1 through 2025.1.3; 12.6.1 through 12.11.5 |
| CVE-2026-93862 New | 7.2 | Oct 27 | Fireware OS Out-of-Bounds Read in FireCluster Sync Allows Denial of Service Affected: 2025.1 before 2026.4; 12.0 before 12.12.4; 12.0 before 12.5.22 |
| CVE-2026-90464 New | 7.2 | Oct 27 | Fireware OS Missing Command Validation allows Authenticated Arbitrary File Modification as Root Affected: 2025.1 before 2026.4; 12.0 before 12.12.4; 12.0 before 12.5.22 |
| CVE-2026-18145 | 7.2 | Sep 29 | Fireware OS Stack-based Buffer Overflow in spamd Allows Remote Code Execution Affected: 2026.3 before 2026.3.2; 2025.0 before 2026.2.3; 12.0 before 12.12.3; 12.0 before 12.5.21 |
| CVE-2026-13046 | 7.2 | Sep 29 | Fireware OS Deserialization of Untrusted Data in samld Allows Remote Code Execution Affected: 2026.3 before 2026.3.2; 2025.0 before 2026.2.3; 12.0 before 12.12.3; 12.11 before 12.11.10 |
| CVE-2026-13053 | 7.2 | Jul 2 | WatchGuard Firebox Authenticated Out of Bounds Write in Management CLI Command Handler Affected: 2025.1 before 2026.2.1; 12.0 before 12.12.1; 11.0; 12.0 before 12.11.9; 12.0 before 12.5.19 |
| CVE-2026-13050 | 7.2 | Jul 2 | WatchGuard Firebox networkd Out of Bounds Write Vulnerability Affected: 2025.1 before 2026.2.1; 12.0 before 12.12.1; 11.8; 12.0 before 12.11.9; 12.0 before 12.5.19 |
| CVE-2026-13054 | 7.2 | Jul 2 | WatchGuard Firebox Arbitrary File Write via Path Traversal in Management Web UI Affected: 2025.1 before 2026.2.1; 12.0 before 12.12.1; 11.0; 12.0 before 12.11.9; 12.0 before 12.5.19 |
| CVE-2026-13722 | 7.2 | Jul 2 | WatchGuard Firebox Firmware Image Validation Bypass in WatchGuard Fireware OS Affected: 2025.1 before 2026.2.1; 12.0 before 12.12.1; 11.0 through 11.12.4+541730; 12.0 before 12.11.9; 12.0 |
| CVE-2026-13384 | 7.2 | Jul 2 | WatchGuard Firebox wgagent Out of Bounds Write Vulnerability Affected: 2025.1 before 2026.2.1; 12.1 before 12.12.1; 12.1 before 12.11.9; 12.1 before 12.5.19 |
| CVE-2026-13383 | 7.2 | Jul 2 | WatchGuard Firebox ikestubd Out of Bounds Write Vulnerability Affected: 2025.1 before 2026.2.1; 12.1 before 12.12.1; 12.1 before 12.11.9; 12.1 before 12.5.19 |
| CVE-2026-3987 | 7.2 | Apr 1 | WatchGuard Firebox Arbitrary File Write vis Path Traversal in Fireware Web UI Affected: 2025.1 before 2026.2; 12.6.1 before 12.12 |
| CVE-2026-3342 | 7.2 | Mar 3 | WatchGuard Firebox Out of Bounds Write Vulnerability Affected: 11.9 through 11.12.4+541730; 12.0 through 12.11.7; 12.5 through 12.5.16; 2025.1 through 2026.1.1 |
