FO
Product
Fireware OS
On CISA KEVExploited in the wildRansomware-linked
82
CVEs
2
On KEV
9.8
Max CVSS
32
New 30D
Severity mix
Critical 14High 44Medium 26Low 0
Watch
Add Fireware OS to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-1547 | 7.2 | Dec 4 | WatchGuard Firebox Authenticated Stack Overflow in Certificate Request Command Affected: 12.0 through 12.11.3; 12.0 before 12.5.13 |
| CVE-2025-12196 | 7.2 | Dec 4 | WatchGuard Firebox Authenticated Out of Bounds Write in Management CLI Ping Command Affected: 2025.1; 12.0 before 12.11.5; 12.0 before 12.5.14 |
| CVE-2025-12195 | 7.2 | Dec 4 | WatchGuard Firebox Authenticated Out of Bounds Write in Management CLI IPSec Configuration Affected: 2025.1 before 2025.1.3; 12.0 before 12.11.5; 11.0 through 11.12.4+541730; 12.0 before 12.5.14 |
| CVE-2025-12026 | 7.2 | Dec 4 | WatchGuard Firebox Authenticated Out of Bounds Write in certd Affected: 2025.1 before 2025.1.3; 12.0 through 12.11.5; 12.0 before 12.5.14 |
| CVE-2026-103593 New | 7.1 | Oct 27 | Fireware OS Stack Buffer Overflow in Logging Service Allows Remote Code Execution Affected: 2025.1 before 2026.4; 12.0 before 12.12.4; 12.0 before 12.5.22 |
| CVE-2026-93864 New | 7.1 | Oct 27 | Fireware OS Link Following in firewalld Allows Local Arbitrary File Overwrite as Root Affected: 2025.1 before 2026.4; 12.0 before 12.12.4; 12.0 before 12.5.22 |
| CVE-2026-86105 | 7.1 | Sep 29 | Fireware OS Improper Authorization in Access Portal Reverse Proxy Affected: 2026.3 before 2026.3.2; 2025.0 before 2026.2.3; 12.0 before 12.12.3; 12.0 before 12.5.21 |
| CVE-2026-1498 | 7.0 | Jan 30 | WatchGuard Firebox LDAP Injection Affected: 2025.1 before 2026.1; 12.0 before 12.11.7; 12.0 before 12.5.16 |
| CVE-2026-81851 | 6.9 | Aug 27 | Fireware OS Heap-Based Buffer Overflow in iked Allows Denial of Service Affected: 2025.0 before 2026.2.1; 12.0 before 12.12.1; 12.0 before 12.11.9; 12.0 before 12.5.18 |
| CVE-2025-6999 | 6.9 | Sep 15 | WatchGuard Firebox Authentication Portal Request Smuggling Vulnerability Affected: 12.0 before 12.11.3 |
| CVE-2026-4266 | 6.7 | Mar 30 | WatchGuard Firebox Insecure Deserialization in Fireware Access Portal Affected: 2025.1 before 2026.2; 12.1 before 12.12; 12.1 before 12.11.9 |
| CVE-2026-86101 | 6.5 | Sep 29 | Fireware OS Authorization Bypass in SAML Login Allows Unauthorized SSLVPN Access Affected: 2026.3 before 2026.3.2; 2025.0 before 2026.2.3; 12.0 before 12.12.3; 12.0 before 12.5.21 |
| CVE-2026-18105 | 6.5 | Sep 29 | Fireware OS Uncontrolled Resource Consumption in Diagnostic Tasks Allows Denial of Service Affected: 2026.3 before 2026.3.2; 2025.0 before 2026.2.3; 12.0 before 12.12.3; 12.0 before 12.5.21 |
| CVE-2026-4315 | 6.5 | Mar 30 | WatchGuard Firebox Cross-Site Request Forgery (CSRF) in Fireware Web UI Affected: 2025.1 before 2026.2; 12.0 before 12.12; 11.8 through 11.12.4+541730; 12.0 before 12.11.9; 12.0 before 12.5.18 |
| CVE-2026-113881 New | 6.1 | Oct 27 | Fireware OS Stack Buffer Overflow in VPN Network Access Enforcement Allows Unprivileged Code Execution Affected: 2025.1 before 2026.4; 12.9 before 12.12.4 |
| CVE-2026-3343 | 6.1 | Mar 3 | WatchGuard Firebox Reflected Cross-Site-Scripting (XSS) Vulnerability in Fireware Web UI Affected: 2025.1 before 2026.1.2; 12.7 before 12.11.8 |
| CVE-2025-13939 | 6.1 | Dec 4 | WatchGuard Firebox Stored Cross-Site-Scripting (XSS) Vulnerability in Gateway Wireless Controller Affected: 2025.1 before 2025.1.3; 12.0 before 12.11.5; 11.7.2 through 11.12.4+541730; 12.0 before 12.5.14 |
| CVE-2025-13938 | 6.1 | Dec 4 | WatchGuard Firebox Stored Cross-Site-Scripting (XSS) Vulnerability in Autotask Technology Integration Configuration Affected: 12.0; 2025.1; 12.0 before 12.11.5 |
| CVE-2025-13937 | 6.1 | Dec 4 | WatchGuard Firebox Stored Cross-Site-Scripting (XSS) Vulnerability in ConnectWise Technology Integration Configuration Affected: 2025.1 before 2025.1.3; 12.0 before 12.11.5; 12.0 before 12.5.14 |
| CVE-2025-13936 | 6.1 | Dec 4 | WatchGuard Firebox Stored Cross-Site-Scripting (XSS) Vulnerability in Tigerpaw Technology Integration Configuration Affected: 2025.1; 12.0 before 12.11.5; 12.0 before 12.5.14 |
| CVE-2026-104381 New | 6.0 | Oct 27 | Fireware OS Missing Authentication in FireCluster State Sync Allows BOVPN Tunnel Denial of Service Affected: 2025.1 before 2026.4; 12.0 before 12.12.4; 12.0 before 12.5.22 |
| CVE-2026-82332 New | 5.7 | Oct 27 | Fireware OS Improper Authentication in AuthPoint MFA Verification Allows Session Hijacking Affected: 2025.1 before 2026.4; 12.7 before 12.12.4 |
| CVE-2025-13940 | 5.5 | Dec 4 | WatchGuard Firebox Boot Time System Integrity Check Bypass Affected: 2025.1 before 2025.1.3; 12.8.1 before 12.11.5 |
| CVE-2026-13224 | 4.9 | Sep 29 | Fireware OS Path Traversal in WebUI Management Agent Allows Arbitrary Local File Read Affected: 12.0 before 12.5.21; 2026.3 before 2026.3.2; 2025.0 before 2026.2.3; 12.0 before 12.12.3 |
| CVE-2026-13371 | 4.9 | Jul 2 | WatchGuard Firebox Management Web UI Denial of Service via Unsafe Deserialization Affected: 2025.1 before 2026.2.1; 12.0 before 12.12.1; 12.0 before 12.11.9; 12.0 before 12.5.19 |
| CVE-2026-3344 | 4.9 | Mar 3 | WatchGuard Firebox System Integrity Check Bypass Affected: 2025.1 before 2026.1.2; 12.0 before 12.11.8; 12.0 before 12.5.17 |
| CVE-2026-13377 | 4.8 | Jul 2 | WatchGuard Firebox Stored Cross-Site-Scripting (XSS) Vulnerability in SIP Proxy Configuration Affected: 12.0 before 12.11.9; 2025.1 before 2026.2.1; 12.0 before 12.12.1; 12.0 before 12.5.19 |
| CVE-2026-13376 | 4.8 | Jul 2 | WatchGuard Firebox Stored Cross-Site-Scripting (XSS) Vulnerability in spamBlocker Module Affected: 2025.1 before 2026.2.1; 12.0 before 12.12.1; 12.0 before 12.11.9; 12.0 before 12.5.19 |
| CVE-2026-13375 | 4.8 | Jul 2 | WatchGuard Firebox Stored Cross-Site-Scripting (XSS) Vulnerability in Autotask Technology Integration Configuration Affected: 2025.1 before 2026.2.1; 12.4 before 12.12.1; 2025.1 through 2026.2; 12.4 before 12.11.9; 12.4 before 12.5.19 |
| CVE-2026-13374 | 4.8 | Jul 2 | WatchGuard Firebox Stored Cross-Site-Scripting (XSS) Vulnerability in ConnectWise Technology Integration Configuration Affected: 2025.1 before 2026.2.1; 12.4 before 12.12.1; 12.4 before 12.11.9; 12.4 before 12.5.19 |
| CVE-2026-13373 | 4.8 | Jul 2 | WatchGuard Firebox Stored Cross-Site-Scripting (XSS) Vulnerability in Tigerpaw Technology Integration Configuration Affected: 2025.1 before 2026.2.1; 12.4 before 12.12.1; 12.4 before 12.11.9; 12.4 before 12.5.19 |
| CVE-2025-6946 | 4.8 | Dec 4 | WatchGuard Firebox Stored Cross-Site-Scripting (XSS) Vulnerability in IPS Configuration Affected: 12.0 before 12.11.3; 12.0 before 12.5.13 |
| CVE-2025-6947 | 4.8 | Sep 15 | WatchGuard Firebox Stored Cross-Site-Scripting (XSS) Vulnerability in SIP Proxy Configuration Affected: 12.0 before 12.11.3; 12.0 before 12.5.13 |
| CVE-2026-13728 | 4.4 | Jul 2 | WatchGuard Firebox Hardcoded Fallback Encryption Key in Access Portal Resource Credential Database Affected: 2025.1 before 2026.2.1; 12.0 before 12.12.1; 12.0 before 12.11.9 |