FI
Product
Fireware
On CISA KEVExploited in the wildRansomware-linked
75
CVEs
4
On KEV
9.8
Max CVSS
14
New 30D
Severity mix
Critical 6High 37Medium 29Low 0
Watch
Add Fireware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-14733 RansomwareIn wildKEV | 9.8 | Dec 19 | WatchGuard Firebox iked Out of Bounds Write Vulnerability Affected: 11.10.2 before 12.5.15; 11.10.2 before 12.11.6; 2025.1 before 2025.1.4 |
| CVE-2025-9242 In wildKEV | 9.8 | Sep 17 | WatchGuard Firebox iked Out of Bounds Write Vulnerability Affected: 11.10.2 before 12.11.4; 11.10.2 before 12.5.13; 2025.1 |
| CVE-2022-26318 In wildKEV | 9.8 | Mar 4 | WatchGuard Firebox and XTM Appliances Arbitrary Code Execution Affected: 12.0.0 before 12.1.3; 12.5 before 12.5.9; 12.7.0 before 12.7.2; 12.1.3; 12.1.3; 12.1.3; +7 more |
| CVE-2026-86131 | 9.8 | Sep 29 | Fireware OS Code Injection in BOVPN Over TLS Client Allows Remote Code Execution Affected: 12.0 before 12.5.21; 12.12 before 12.12.3; 2025.0 before 2026.2.3; 2026.3 before 2026.3.2 |
| CVE-2022-31789 | 9.8 | Sep 6 | An integer overflow in WatchGuard Firebox and XTM appliances allows an unauthenticated remote attacker to trigger a buffer overflow and potentially execute arbitrary code by… Affected: 12.0.0 before 12.1.4; 12.2.0 before 12.5.10; 12.6.1; 12.6.1; 12.6.3; 12.6.4; +4 more |
| CVE-2022-25361 | 9.1 | Jun 7 | WatchGuard Firebox and XTM appliances allow an unauthenticated remote attacker to delete arbitrary files from a limited set of directories on the system Affected: 12.0.0 before 12.1.3; 12.2.0 before 12.5.9; 12.1.3; 12.1.3; 12.1.3; 12.1.3; +8 more |
Showing 6