Login Request a demo
FI
Product
Fireware
by Watchguard · last CVE Sep 30, 2026
On CISA KEVExploited in the wildRansomware-linked
75
CVEs
4
On KEV
9.8
Max CVSS
14
New 30D
Vulnerabilities75In the news10Timeline
Severity mix
Critical 6High 37Medium 29Low 0
Severity
All severities75Critical6High37Medium29Low0
Exploitation
On CISA KEV4Exploited in the wild4
Watch

Add Fireware to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-13939
6.1
0%
Dec 4
WatchGuard Firebox Stored Cross-Site-Scripting (XSS) Vulnerability in Gateway Wireless Controller
Affected: 2025.1 before 2025.1.3; 11.7.2 before 12.11.5; 11.7.2 before 12.5.14
CVE-2025-13938
6.1
0%
Dec 4
WatchGuard Firebox Stored Cross-Site-Scripting (XSS) Vulnerability in Autotask Technology Integration Configuration
Affected: 2025.1 before 2025.1.3; 12.0.0 before 12.11.5; 12.5 before 12.5.14
CVE-2025-13937
6.1
0%
Dec 4
WatchGuard Firebox Stored Cross-Site-Scripting (XSS) Vulnerability in ConnectWise Technology Integration Configuration
Affected: 2025.1 before 2025.1.3; 12.0.0 before 12.11.5; 12.5 before 12.5.14
CVE-2025-13936
6.1
0%
Dec 4
WatchGuard Firebox Stored Cross-Site-Scripting (XSS) Vulnerability in Tigerpaw Technology Integration Configuration
Affected: 2025.1 before 2025.1.3; 12.0.0 before 12.11.5; 12.5 before 12.5.14
CVE-2025-0178
6.1
0%
Feb 14
An Improper Input Validation vulnerability in WatchGuard Fireware OS allows an attacker with network access to manipulate the value of the HTTP Host header in requests sent to the…
Affected: 12.0.0 before 12.11.1; 12.5 before 12.5.13
CVE-2016-6154
6.1
1%
Aug 23
The authentication applet in Watchguard Fireware 11.11 Operating System has reflected XSS (this can also cause an open redirect)
Affected: through 11.11
CVE-2017-14615
6.1
1%
Sep 20
An FBX-5313 issue was discovered in WatchGuard Fireware before 12.0
Affected: through 11.12.4
CVE-2025-13940
5.5
0%
Dec 4
WatchGuard Firebox Boot Time System Integrity Check Bypass
Affected: 2025.1 before 2025.1.3; 12.8.1 before 12.11.5
CVE-2022-31792
5.4
1%
Sep 6
A stored cross-site scripting (XSS) vulnerability exists in the management web interface of WatchGuard Firebox and XTM appliances
Affected: 12.0.0 before 12.1.4; 12.2.0 before 12.5.10; 12.6.1; 12.6.1; 12.6.3; 12.6.4; +4 more
CVE-2017-8056
5.3
5%
Apr 22
WatchGuard Fireware v11.12.1 and earlier mishandles requests referring to an XML External Entity (XXE), in the XML-RPC agent
Affected: through 11.2.1
CVE-2017-8055
5.3
2%
Apr 22
WatchGuard Fireware allows user enumeration, e.g., in the Firebox XML-RPC login handler
Affected: through 11.2.1
CVE-2026-13224
4.9
0%
Sep 29
Fireware OS Path Traversal in WebUI Management Agent Allows Arbitrary Local File Read
Affected: 12.0 before 12.5.21; 12.12 before 12.12.3; 2025.0 before 2026.2.3; 2026.3 before 2026.3.2
CVE-2026-13371
4.9
1%
Jul 2
WatchGuard Firebox Management Web UI Denial of Service via Unsafe Deserialization
Affected: 2025.1 before 2026.2.1; 12.5 before 12.5.19; 12.0 before 12.12.1
CVE-2026-3344
4.9
0%
Mar 3
WatchGuard Firebox System Integrity Check Bypass
Affected: 12.0 before 12.11.8; 12.5.9 before 12.5.17; 2025.1 before 2026.1.2
CVE-2026-13377
4.8
0%
Jul 2
WatchGuard Firebox Stored Cross-Site-Scripting (XSS) Vulnerability in SIP Proxy Configuration
Affected: 12.0 before 12.12.1; 2025.1 before 2026.2.1; 12.5 through 12.5.18
CVE-2026-13376
4.8
0%
Jul 2
WatchGuard Firebox Stored Cross-Site-Scripting (XSS) Vulnerability in spamBlocker Module
Affected: 12.0 before 12.12.1; 2025.1 before 2026.2.1; 12.5 through 12.5.18
CVE-2026-13375
4.8
0%
Jul 2
WatchGuard Firebox Stored Cross-Site-Scripting (XSS) Vulnerability in Autotask Technology Integration Configuration
Affected: 12.4 before 12.12.1; 2025.1 before 2026.2.1; 12.5 through 12.5.18
CVE-2026-13374
4.8
0%
Jul 2
WatchGuard Firebox Stored Cross-Site-Scripting (XSS) Vulnerability in ConnectWise Technology Integration Configuration
Affected: 12.4 before 12.12.1; 2025.1 before 2026.2.1; 12.5 through 12.5.18
CVE-2026-13373
4.8
0%
Jul 2
WatchGuard Firebox Stored Cross-Site-Scripting (XSS) Vulnerability in Tigerpaw Technology Integration Configuration
Affected: 12.4 before 12.12.1; 2025.1 before 2026.2.1; 12.5 through 12.5.18
CVE-2025-6946
4.8
0%
Dec 4
WatchGuard Firebox Stored Cross-Site-Scripting (XSS) Vulnerability in IPS Configuration
Affected: 12.0.0 before 12.11.3; 12.5 before 12.5.13
CVE-2025-1071
4.8
0%
Feb 14
A stored cross-site scripting (XSS) vulnerability exists in the management interface of WatchGuard Firebox appliances via the spamBlocker module
Affected: 12.0.0 before 12.11.1; 12.5 before 12.5.13
CVE-2026-13728
4.4
0%
Jul 2
WatchGuard Firebox Hardcoded Fallback Encryption Key in Access Portal Resource Credential Database
Affected: 12.1 before 12.12.1; 2025.1 before 2026.2.1
CVE-2014-0338
–
2%
Mar 16
Multiple cross-site scripting (XSS) vulnerabilities in the firewall policy management pages in WatchGuard Fireware XTM before 11.8.3 allow remote attackers to inject arbitrary web…
Affected: through 11.8.1; 11.6; 11.6.1; 11.6.3; 11.6.5; 11.6.6; +5 more
CVE-2013-6021
–
12%
Oct 19
Buffer overflow in WGagent in WatchGuard WSM and Fireware before 11.8 allows remote attackers to execute arbitrary code via a long sessionid value in a cookie
Affected: through 11.7.4; 11.0.2; 11.1; 11.2.3; 11.3; 11.3.6; +6 more
CVE-2013-5702
–
1%
Oct 19
Multiple cross-site scripting (XSS) vulnerabilities in WebCenter in WatchGuard WSM and Fireware before 11.8 allow remote attackers to inject arbitrary web script or HTML via…
Affected: through 11.7.4; 11.6; 11.6.1; 11.6.3; 11.6.5; 11.6.6; +3 more
Page 2 of 2 · 75 total
12