FO
Product
Fireware OS
On CISA KEVExploited in the wildRansomware-linked
82
CVEs
2
On KEV
9.8
Max CVSS
32
New 30D
Severity mix
Critical 14High 44Medium 24Low 0
Watch
Add Fireware OS to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-4106 | 8.9 | Oct 24 | WatchGuard Firebox leftover debug code vulnerability Affected: 12.0 before 12.11.3; 12.0 before 12.5.13 |
| CVE-2026-8247 | 8.8 | Jul 2 | WatchGuard Firebox admd Out of Bounds Write Vulnerability Affected: 2025.1 before 2026.2.1; 12.0 before 12.12.1; 11.0; 12.0 before 12.11.9; 12.0 before 12.5.19 |
| CVE-2026-93434 New | 8.7 | Oct 27 | Fireware OS XPath Injection in SSH Authentication Allows Blind Extraction of Configuration Secrets Affected: 12.0 before 12.5.22; 2025.1 before 2026.4; 12.0 before 12.12.4 |
| CVE-2026-111107 New | 8.7 | Oct 27 | Fireware OS NULL Pointer Dereference in Management Interface Allows Unauthenticated Denial of Service Affected: 2025.1 before 2026.4; 12.0 before 12.12.4; 12.0 before 12.5.22 |
| CVE-2026-81433 | 8.7 | Sep 29 | Fireware OS Pre-Authentication Stack Buffer Overflow in fingerd Allows Remote Code Execution Affected: 2026.3 before 2026.3.2; 2025.0 before 2026.2.3; 12.0 before 12.12.3 |
| CVE-2026-19314 | 8.7 | Aug 27 | Fireware OS Integer Underflow in iked Allows Unauthenticated Denial of Service (DoS) Affected: 2025.0 before 2026.2.2; 12.0 before 12.12.2; 2026.3 before 2026.3.1; 12.0 before 12.5.20 |
| CVE-2026-19317 | 8.7 | Aug 27 | Fireware OS Pre-Authentication Out-of-Bounds Read in iked Allows Denial of Service (DoS) Affected: 2025.0 before 2026.2.2; 12.0 before 12.12.2; 2026.3 before 2026.3.1; 12.0 before 12.5.20 |
| CVE-2026-78011 | 8.7 | Aug 27 | Fireware OS Integer Underflow in Iked Allows Unauthenticated Denial of Service (DoS) Affected: 2025.0 before 2026.2.2; 12.0 before 12.12.2; 2026.3 before 2026.3.1; 12.0 before 12.5.20 |
| CVE-2026-78010 | 8.7 | Aug 27 | Fireware OS Stack-Based Buffer Overflow in iked Allows Unauthenticated Denial of Service Affected: 2025.0 before 2026.2.2; 12.0 before 12.12.2; 2026.3 before 2026.3.1; 12.0 before 12.5.20 |
| CVE-2026-19316 | 8.7 | Aug 27 | Fireware OS Pre-Authentication Double Free in iked Allows Denial of Service (DoS) Affected: 2025.0 before 2026.2.2; 12.0 before 12.12.2; 2026.3 before 2026.3.1; 12.0 before 12.5.20 |
| CVE-2026-78009 | 8.7 | Aug 27 | Fireware OS Out-of-Bounds Read in iked Allows Unauthenticated Denial of Service (DoS) Affected: 2025.0 before 2026.2.2; 12.0 before 12.12.2; 2026.3 before 2026.3.1; 12.0 before 12.5.20 |
| CVE-2026-90442 New | 8.6 | Oct 27 | Fireware OS Authenticated Stack Buffer Overflow in certd Allows Denial of Service Affected: 2025.1 before 2026.4; 12.0 before 12.12.4; 12.0 before 12.5.22 |
| CVE-2026-78008 | 8.6 | Aug 27 | Fireware OS Authenticated Buffer Overflow in wgagent Affected: 2025.0 before 2026.2.2; 12.0 before 12.12.2; 2026.3 before 2026.3.1; 12.0 before 12.5.20 |
| CVE-2026-90441 | 8.1 | Sep 29 | Fireware OS Missing Authorization in wgagent Management API Allows Denial of Service - Variant B Affected: 2026.3 before 2026.3.2; 2025.0 before 2026.2.3; 12.0 before 12.12.3; 12.0 before 12.5.21 |
| CVE-2026-86136 | 8.1 | Sep 29 | Fireware OS Missing Authorization in wgagent Management API Allows Denial of Service - Variant A Affected: 2026.0 before 2026.3.2; 2025.0 before 2026.2.3; 12.0 before 12.12.3; 12.0 before 12.5.21 |
| CVE-2026-13368 | 8.1 | Jul 2 | WatchGuard Firebox Race Condition and Use-After-Free in Mobile VPN with IKEv2 LDAP Authentication Affected: 2025.1 before 2026.2.1; 12.0 before 12.11.9; 12.0 before 12.5.19 |
| CVE-2026-86134 | 7.5 | Sep 30 | Fireware OS Pre-Authentication NULL Pointer Dereference Allows Remote Denial of Service Affected: 2026.3 before 2026.3.2; 2025.0 before 2026.2.3; 12.0 before 12.12.3; 12.0 before 12.5.21 |
| CVE-2026-86104 | 7.5 | Sep 29 | Fireware OS Resource Exhaustion in Login Process Allows Denial of Service Affected: 2026.3 before 2026.3.2; 2025.0 before 2026.2.3; 12.0 before 12.12.3; 12.0 before 12.5.21 |
| CVE-2026-86133 | 7.5 | Sep 29 | Fireware OS Pre-Authentication Integer Underflow in iked Allows Remote Denial of Service Affected: 2026.3 before 2026.3.2; 2025.0 before 2026.2.3; 12.0 before 12.12.3; 12.0 before 12.5.21 |
| CVE-2026-86132 | 7.5 | Sep 29 | Fireware OS Pre-Authentication Integer Underflow in iked Allows Denial of Service Affected: 2026.3 before 2026.3.2; 2025.0 before 2026.2.3; 12.0 before 12.12.3; 12.0 before 12.5.21 |
| CVE-2026-86128 | 7.5 | Sep 29 | Fireware OS NULL Pointer Dereference in NetFlow IPv6 Traffic Processing Allows Remote Denial of Service Affected: 2026.3 before 2026.3.2; 2025.0 before 2026.2.3; 12.0 before 12.12.3; 12.0 before 12.5.21 |
| CVE-2026-13084 | 7.5 | Jul 2 | Null Pointer Dereference in WatchGuard Fireware OS iked Process Affected: 2025.1 before 2026.2.1; 12.0 before 12.12.1; 11.10.2; 12.0 before 12.11.9; 12.0 before 12.5.19 |
| CVE-2025-1545 | 7.5 | Dec 4 | WatchGuard Firebox XPath Injection Vulnerability in Web CGI Affected: 2025.1 before 2025.1.3; 12.0 before 12.11.5; 11.11 through 11.12.4+541730; 12.0 before 12.5.14 |
| CVE-2025-11838 | 7.5 | Dec 4 | WatchGuard Firebox iked Memory Corruption Vulnerability Affected: 2025.1 through 2025.1.3; 12.6.1 through 12.11.5 |
| CVE-2026-93862 New | 7.2 | Oct 27 | Fireware OS Out-of-Bounds Read in FireCluster Sync Allows Denial of Service Affected: 2025.1 before 2026.4; 12.0 before 12.12.4; 12.0 before 12.5.22 |
| CVE-2026-90464 New | 7.2 | Oct 27 | Fireware OS Missing Command Validation allows Authenticated Arbitrary File Modification as Root Affected: 2025.1 before 2026.4; 12.0 before 12.12.4; 12.0 before 12.5.22 |
| CVE-2026-18145 | 7.2 | Sep 29 | Fireware OS Stack-based Buffer Overflow in spamd Allows Remote Code Execution Affected: 2026.3 before 2026.3.2; 2025.0 before 2026.2.3; 12.0 before 12.12.3; 12.0 before 12.5.21 |
| CVE-2026-13046 | 7.2 | Sep 29 | Fireware OS Deserialization of Untrusted Data in samld Allows Remote Code Execution Affected: 2026.3 before 2026.3.2; 2025.0 before 2026.2.3; 12.0 before 12.12.3; 12.11 before 12.11.10 |
| CVE-2026-13053 | 7.2 | Jul 2 | WatchGuard Firebox Authenticated Out of Bounds Write in Management CLI Command Handler Affected: 2025.1 before 2026.2.1; 12.0 before 12.12.1; 11.0; 12.0 before 12.11.9; 12.0 before 12.5.19 |
| CVE-2026-13050 | 7.2 | Jul 2 | WatchGuard Firebox networkd Out of Bounds Write Vulnerability Affected: 2025.1 before 2026.2.1; 12.0 before 12.12.1; 11.8; 12.0 before 12.11.9; 12.0 before 12.5.19 |
| CVE-2026-13054 | 7.2 | Jul 2 | WatchGuard Firebox Arbitrary File Write via Path Traversal in Management Web UI Affected: 2025.1 before 2026.2.1; 12.0 before 12.12.1; 11.0; 12.0 before 12.11.9; 12.0 before 12.5.19 |
| CVE-2026-13722 | 7.2 | Jul 2 | WatchGuard Firebox Firmware Image Validation Bypass in WatchGuard Fireware OS Affected: 2025.1 before 2026.2.1; 12.0 before 12.12.1; 11.0 through 11.12.4+541730; 12.0 before 12.11.9; 12.0 |
| CVE-2026-13384 | 7.2 | Jul 2 | WatchGuard Firebox wgagent Out of Bounds Write Vulnerability Affected: 2025.1 before 2026.2.1; 12.1 before 12.12.1; 12.1 before 12.11.9; 12.1 before 12.5.19 |
| CVE-2026-13383 | 7.2 | Jul 2 | WatchGuard Firebox ikestubd Out of Bounds Write Vulnerability Affected: 2025.1 before 2026.2.1; 12.1 before 12.12.1; 12.1 before 12.11.9; 12.1 before 12.5.19 |
| CVE-2026-3987 | 7.2 | Apr 1 | WatchGuard Firebox Arbitrary File Write vis Path Traversal in Fireware Web UI Affected: 2025.1 before 2026.2; 12.6.1 before 12.12 |
| CVE-2026-3342 | 7.2 | Mar 3 | WatchGuard Firebox Out of Bounds Write Vulnerability Affected: 11.9 through 11.12.4+541730; 12.0 through 12.11.7; 12.5 through 12.5.16; 2025.1 through 2026.1.1 |
| CVE-2025-1547 | 7.2 | Dec 4 | WatchGuard Firebox Authenticated Stack Overflow in Certificate Request Command Affected: 12.0 through 12.11.3; 12.0 before 12.5.13 |
| CVE-2025-12196 | 7.2 | Dec 4 | WatchGuard Firebox Authenticated Out of Bounds Write in Management CLI Ping Command Affected: 2025.1; 12.0 before 12.11.5; 12.0 before 12.5.14 |
| CVE-2025-12195 | 7.2 | Dec 4 | WatchGuard Firebox Authenticated Out of Bounds Write in Management CLI IPSec Configuration Affected: 2025.1 before 2025.1.3; 12.0 before 12.11.5; 11.0 through 11.12.4+541730; 12.0 before 12.5.14 |
| CVE-2025-12026 | 7.2 | Dec 4 | WatchGuard Firebox Authenticated Out of Bounds Write in certd Affected: 2025.1 before 2025.1.3; 12.0 through 12.11.5; 12.0 before 12.5.14 |
| CVE-2026-103593 New | 7.1 | Oct 27 | Fireware OS Stack Buffer Overflow in Logging Service Allows Remote Code Execution Affected: 2025.1 before 2026.4; 12.0 before 12.12.4; 12.0 before 12.5.22 |
| CVE-2026-93864 New | 7.1 | Oct 27 | Fireware OS Link Following in firewalld Allows Local Arbitrary File Overwrite as Root Affected: 2025.1 before 2026.4; 12.0 before 12.12.4; 12.0 before 12.5.22 |
| CVE-2026-86105 | 7.1 | Sep 29 | Fireware OS Improper Authorization in Access Portal Reverse Proxy Affected: 2026.3 before 2026.3.2; 2025.0 before 2026.2.3; 12.0 before 12.12.3; 12.0 before 12.5.21 |
| CVE-2026-1498 | 7.0 | Jan 30 | WatchGuard Firebox LDAP Injection Affected: 2025.1 before 2026.1; 12.0 before 12.11.7; 12.0 before 12.5.16 |
Showing 44
