FI
Product
Fireware
On CISA KEVExploited in the wildRansomware-linked
75
CVEs
4
On KEV
9.8
Max CVSS
14
New 30D
Severity mix
Critical 6High 37Medium 29Low 0
Watch
Add Fireware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-23176 In wildKEV | 8.8 | Feb 24 | WatchGuard Firebox and XTM Privilege Escalation Vulnerability Affected: 12.0.0 before 12.1.3; 12.2.0 before 12.5.7; 12.1.3; 12.1.3; 12.1.3; 12.5.7; +3 more |
| CVE-2026-8247 | 8.8 | Jul 2 | WatchGuard Firebox admd Out of Bounds Write Vulnerability Affected: 11.0.0 before 11.12.4; 11.12.4; 11.12.4; 12.5 before 12.5.19; 2025.1 before 2026.2.1; 12.0 before 12.12.1 |
| CVE-2022-25360 | 8.8 | Feb 24 | WatchGuard Firebox and XTM appliances allow an authenticated remote attacker with unprivileged credentials to upload files to arbitrary locations Affected: 12.0.0 before 12.1.3; 12.2.0 before 12.5.9; 12.7.0 before 12.7.2; 12.1.3; 12.1.3; 12.1.3; +9 more |
| CVE-2022-25293 | 8.8 | Feb 24 | A systemd stack-based buffer overflow in WatchGuard Firebox and XTM appliances allows an authenticated remote attacker to potentially execute arbitrary code by initiating a… Affected: 12.0.0 before 12.1.3; 12.2.0 before 12.5.9; 12.7.0 before 12.7.2; 12.1.3; 12.1.3; 12.1.3; +9 more |
| CVE-2022-25292 | 8.8 | Feb 24 | A wgagent stack-based buffer overflow in WatchGuard Firebox and XTM appliances allows an authenticated remote attacker to potentially execute arbitrary code by initiating a… Affected: 12.0.0 before 12.1.3; 12.2.0 before 12.5.9; 12.7.0 before 12.7.2; 12.1.3; 12.1.3; 12.1.3; +9 more |
| CVE-2022-25291 | 8.8 | Feb 24 | An integer overflow in WatchGuard Firebox and XTM appliances allows an authenticated remote attacker to trigger a heap-based buffer overflow and potentially execute arbitrary code… Affected: 12.0.0 before 12.1.3; 12.2.0 before 12.5.9; 12.7.0 before 12.7.2; 12.1.3; 12.1.3; 12.1.3; +9 more |
| CVE-2026-90441 | 8.1 | Sep 29 | Fireware OS Missing Authorization in wgagent Management API Allows Denial of Service - Variant B Affected: 12.0 before 12.5.21; 12.12 before 12.12.3; 2025.0 before 2026.2.3; 2026.3 before 2026.3.2 |
| CVE-2026-86136 | 8.1 | Sep 29 | Fireware OS Missing Authorization in wgagent Management API Allows Denial of Service - Variant A Affected: 12.0 before 12.5.21; 12.12 before 12.12.3; 2025.0 before 2026.2.3; 2026.3 before 2026.3.2 |
| CVE-2026-13368 | 8.1 | Jul 2 | WatchGuard Firebox Race Condition and Use-After-Free in Mobile VPN with IKEv2 LDAP Authentication Affected: 2025.1 before 2026.2.1; 12.5 before 12.5.19; 11.0.0 before 11.12.4; 11.12.4; 11.12.4; 12.0 before 12.12.1 |
| CVE-2026-13079 | 7.8 | Jul 2 | WatchGuard Mobile VPN with SSL Windows Client Local Privilege Escalation Affected: 12.0.0 before 12.12.1; 2025.1 before 2026.2.1; 12.5 through 12.5.18 |
| CVE-2022-31791 | 7.8 | Sep 6 | WatchGuard Firebox and XTM appliances allow a local attacker (that has already obtained shell access) to elevate their privileges and execute code with root permissions Affected: 12.0.0 before 12.1.4; 12.2.0 before 12.5.10; 12.6.1; 12.6.1; 12.6.3; 12.6.4; +4 more |
| CVE-2026-86134 | 7.5 | Sep 30 | Fireware OS Pre-Authentication NULL Pointer Dereference Allows Remote Denial of Service Affected: 12.0 before 12.5.21; 12.12 before 12.12.3; 2025.0 before 2026.2.3; 2026.3 before 2026.3.2 |
| CVE-2026-86104 | 7.5 | Sep 29 | Fireware OS Resource Exhaustion in Login Process Allows Denial of Service Affected: 12.0 before 12.5.21; 12.12 before 12.12.3; 2025.0 before 2026.2.3; 2026.3 before 2026.3.2 |
| CVE-2026-86133 | 7.5 | Sep 29 | Fireware OS Pre-Authentication Integer Underflow in iked Allows Remote Denial of Service Affected: 12.0 before 12.5.21; 12.12 before 12.12.3; 2025.0 before 2026.2.3; 2026.3 before 2026.3.2 |
| CVE-2026-86132 | 7.5 | Sep 29 | Fireware OS Pre-Authentication Integer Underflow in iked Allows Denial of Service Affected: 12.0 before 12.5.21; 12.12 before 12.12.3; 2025.0 before 2026.2.3; 2026.3 before 2026.3.2 |
| CVE-2026-86128 | 7.5 | Sep 29 | Fireware OS NULL Pointer Dereference in NetFlow IPv6 Traffic Processing Allows Remote Denial of Service Affected: 12.0 before 12.5.21; 12.12 before 12.12.3; 2025.0 before 2026.2.3; 2026.3 before 2026.3.2 |
| CVE-2026-13084 | 7.5 | Jul 2 | Null Pointer Dereference in WatchGuard Fireware OS iked Process Affected: 12.5 before 12.5.19; 11.0.0 before 11.12.4; 11.12.4; 11.12.4; 12.0 before 12.12.1; 2025.1 before 2026.2.1 |
| CVE-2025-1545 | 7.5 | Dec 4 | An XPath Injection vulnerability in WatchGuard Fireware OS may allow a remote unauthenticated attacker to retrieve sensitive information from the Firebox configuration through an… Affected: 2025.1 before 2025.1.3; 11.11 before 12.11.5; 11.11 before 12.5.14 |
| CVE-2025-11838 | 7.5 | Dec 4 | A memory corruption vulnerability in WatchGuard Fireware OS may allow an unauthenticated attacker to trigger a Denial of Service (DoS) condition in the Mobile User VPN with IKEv2… Affected: 2025.1 before 2025.1.3; 12.0.0 before 12.11.5 |
| CVE-2022-31790 | 7.5 | Sep 6 | WatchGuard Firebox and XTM appliances allow an unauthenticated remote attacker to retrieve sensitive authentication server settings by sending a malicious request to exposed… Affected: 12.0.0 before 12.1.4; 12.2.0 before 12.5.10; 12.6.1; 12.6.1; 12.6.3; 12.6.4; +4 more |
| CVE-2017-14616 | 7.5 | Sep 20 | An FBX-5312 issue was discovered in WatchGuard Fireware before 12.0 Affected: through 11.12.4 |
| CVE-2026-18145 | 7.2 | Sep 29 | Fireware OS Stack-based Buffer Overflow in spamd Allows Remote Code Execution Affected: 12.0 before 12.5.21; 12.12 before 12.12.3; 2025.2 before 2026.2.3; 2026.3 before 2026.3.2 |
| CVE-2026-13046 | 7.2 | Sep 29 | Fireware OS Deserialization of Untrusted Data in samld Allows Remote Code Execution Affected: 12.0 before 12.11.10; 12.12 before 12.12.3; 2025.0 before 2026.2.3; 2026.3 before 2026.3.2 |
| CVE-2026-13053 | 7.2 | Jul 2 | WatchGuard Firebox Authenticated Out of Bounds Write in Management CLI Command Handler Affected: 11.0 before 12.12.1; 2025.1 before 2026.2.1; 11.0 through 12.5.18 |
| CVE-2026-13050 | 7.2 | Jul 2 | WatchGuard Firebox networkd Out of Bounds Write Vulnerability Affected: 2025.1 before 2026.2.1; 12.5 before 12.5.19; 11.0.0 before 11.12.4; 11.12.4; 11.12.4; 12.0 before 12.12.1 |
| CVE-2026-13054 | 7.2 | Jul 2 | WatchGuard Firebox Arbitrary File Write via Path Traversal in Management Web UI Affected: 11.0 before 12.12.1; 2025.1 before 2026.2.1; 11.0 through 12.5.18 |
| CVE-2026-13722 | 7.2 | Jul 2 | WatchGuard Firebox Firmware Image Validation Bypass in WatchGuard Fireware OS Affected: 2025.1 before 2026.2.1; 12.5 through 12.5.18; 12.0 before 12.12.1; 11.0.0 before 11.12.4; 11.12.4; 11.12.4 |
| CVE-2026-13384 | 7.2 | Jul 2 | WatchGuard Firebox wgagent Out of Bounds Write Vulnerability Affected: 12.1 before 12.12.1; 2025.1 before 2026.2.1; 12.5 through 12.5.18 |
| CVE-2026-13383 | 7.2 | Jul 2 | WatchGuard Firebox ikestubd Out of Bounds Write Vulnerability Affected: 12.1 before 12.12.1; 2025.1 before 2026.2.1; 12.5 through 12.5.18 |
| CVE-2026-3987 | 7.2 | Apr 1 | WatchGuard Firebox Arbitrary File Write vis Path Traversal in Fireware Web UI Affected: 2025.1 before 2026.2; 12.6.1 before 12.12 |
| CVE-2026-3342 | 7.2 | Mar 3 | WatchGuard Firebox Out of Bounds Write Vulnerability Affected: 12.5 before 12.5.17; 2025.1 before 2026.1.2; 11.9 before 12.11.8 |
| CVE-2025-1547 | 7.2 | Dec 4 | A stack-based buffer overflow vulnerability [CWE-121] in WatchGuard Fireware OS's certificate request command could allow an authenticated privileged user to execute arbitrary… Affected: 12.0.0 before 12.11.3; 12.5 before 12.5.13 |
| CVE-2025-12196 | 7.2 | Dec 4 | An Out-of-bounds Write vulnerability in WatchGuard Fireware OS's CLI could allow an authenticated privileged user to execute arbitrary code via a specially crafted CLI command Affected: 2025.1 before 2025.1.3; 12.0.0 before 12.11.5; 12.5 before 12.5.14 |
| CVE-2025-12195 | 7.2 | Dec 4 | An Out-of-bounds Write vulnerability in WatchGuard Fireware OS's CLI could allow an authenticated privileged user to execute arbitrary code via specially crafted IPSec… Affected: 11.0 before 12.5.14; 11.0 before 12.11.5; 2025.1 before 2025.1.3 |
| CVE-2025-12026 | 7.2 | Dec 4 | An Out-of-bounds Write vulnerability in WatchGuard Fireware OS’s certificate request command could allow an authenticated privileged user to execute arbitrary code via specially… Affected: 2025.1 before 2025.1.3; 12.0.0 before 12.11.5; 12.5 before 12.5.14 |
| CVE-2024-5974 | 7.2 | Jul 9 | A buffer overflow in WatchGuard Fireware OS could may allow an authenticated remote attacker with privileged management access to execute arbitrary code with system privileges on… Affected: 11.9.4 before 12.5.12; 12.6 before 12.10.4; 12.5.12 |
| CVE-2026-86105 | 7.1 | Sep 29 | Fireware OS Improper Authorization in Access Portal Reverse Proxy Affected: 12.0 before 12.5.21; 12.12 before 12.12.3; 2025.0 before 2026.2.3; 2026.3 before 2026.3.2 |
Showing 37
