Login Request a demo
FI
Product
Fireware
by Watchguard · last CVE Sep 30, 2026
On CISA KEVExploited in the wildRansomware-linked
75
CVEs
4
On KEV
9.8
Max CVSS
14
New 30D
Vulnerabilities75In the news10Timeline
Severity mix
Critical 6High 37Medium 29Low 0
Severity
All severities75Critical6High37Medium29Low0
Exploitation
On CISA KEV4Exploited in the wild4
Watch

Add Fireware to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-4266
6.7
0%
Mar 30
WatchGuard Firebox Insecure Deserialization in Fireware Access Portal
Affected: 2025.1 before 2026.2; 12.1 before 12.12
CVE-2026-86101
6.5
0%
Sep 29
Fireware OS Authorization Bypass in SAML Login Allows Unauthorized SSLVPN Access
Affected: 12.0 before 12.5.21; 12.12 before 12.12.3; 2025.0 before 2026.2.3; 2026.3 before 2026.3.2
CVE-2026-18105
6.5
0%
Sep 29
Fireware OS Uncontrolled Resource Consumption in Diagnostic Tasks Allows Denial of Service
Affected: 12.0 before 12.5.21; 12.12 before 12.12.3; 2025.0 before 2026.2.3; 2026.3 before 2026.3.2
CVE-2026-4315
6.5
0%
Mar 30
WatchGuard Firebox Cross-Site Request Forgery (CSRF) in Fireware Web UI
Affected: 2025.1 before 2026.2; 12.5 before 12.5.18; 11.8 before 11.12.4; 11.12.4; 11.12.4; 12.0 before 12.12
CVE-2022-25363
6.5
1%
Feb 24
WatchGuard Firebox and XTM appliances allow an authenticated remote attacker with unprivileged credentials to modify privileged management user credentials
Affected: 12.0.0 before 12.1.3; 12.2.0 before 12.5.9; 12.7.0 before 12.7.2; 12.1.3; 12.1.3; 12.1.3; +9 more
CVE-2022-25290
6.5
1%
Feb 24
WatchGuard Firebox and XTM appliances allow an authenticated remote attacker with unprivileged credentials to retrieve certificate private keys
Affected: 12.0.0 before 12.1.3; 12.2.0 before 12.5.9; 12.7.0 before 12.7.2; 12.1.3; 12.1.3; 12.1.3; +9 more
CVE-2026-3343
6.1
0%
Mar 3
WatchGuard Firebox Reflected Cross-Site-Scripting (XSS) Vulnerability in Fireware Web UI
Affected: 12.7 before 12.11.8; 2025.1 before 2026.1.2
CVE-2025-13939
6.1
0%
Dec 4
WatchGuard Firebox Stored Cross-Site-Scripting (XSS) Vulnerability in Gateway Wireless Controller
Affected: 2025.1 before 2025.1.3; 11.7.2 before 12.11.5; 11.7.2 before 12.5.14
CVE-2025-13938
6.1
0%
Dec 4
WatchGuard Firebox Stored Cross-Site-Scripting (XSS) Vulnerability in Autotask Technology Integration Configuration
Affected: 2025.1 before 2025.1.3; 12.0.0 before 12.11.5; 12.5 before 12.5.14
CVE-2025-13937
6.1
0%
Dec 4
WatchGuard Firebox Stored Cross-Site-Scripting (XSS) Vulnerability in ConnectWise Technology Integration Configuration
Affected: 2025.1 before 2025.1.3; 12.0.0 before 12.11.5; 12.5 before 12.5.14
CVE-2025-13936
6.1
0%
Dec 4
WatchGuard Firebox Stored Cross-Site-Scripting (XSS) Vulnerability in Tigerpaw Technology Integration Configuration
Affected: 2025.1 before 2025.1.3; 12.0.0 before 12.11.5; 12.5 before 12.5.14
CVE-2025-0178
6.1
0%
Feb 14
An Improper Input Validation vulnerability in WatchGuard Fireware OS allows an attacker with network access to manipulate the value of the HTTP Host header in requests sent to the…
Affected: 12.0.0 before 12.11.1; 12.5 before 12.5.13
CVE-2016-6154
6.1
1%
Aug 23
The authentication applet in Watchguard Fireware 11.11 Operating System has reflected XSS (this can also cause an open redirect)
Affected: through 11.11
CVE-2017-14615
6.1
1%
Sep 20
An FBX-5313 issue was discovered in WatchGuard Fireware before 12.0
Affected: through 11.12.4
CVE-2025-13940
5.5
0%
Dec 4
WatchGuard Firebox Boot Time System Integrity Check Bypass
Affected: 2025.1 before 2025.1.3; 12.8.1 before 12.11.5
CVE-2022-31792
5.4
1%
Sep 6
A stored cross-site scripting (XSS) vulnerability exists in the management web interface of WatchGuard Firebox and XTM appliances
Affected: 12.0.0 before 12.1.4; 12.2.0 before 12.5.10; 12.6.1; 12.6.1; 12.6.3; 12.6.4; +4 more
CVE-2017-8056
5.3
5%
Apr 22
WatchGuard Fireware v11.12.1 and earlier mishandles requests referring to an XML External Entity (XXE), in the XML-RPC agent
Affected: through 11.2.1
CVE-2017-8055
5.3
2%
Apr 22
WatchGuard Fireware allows user enumeration, e.g., in the Firebox XML-RPC login handler
Affected: through 11.2.1
CVE-2026-13224
4.9
0%
Sep 29
Fireware OS Path Traversal in WebUI Management Agent Allows Arbitrary Local File Read
Affected: 12.0 before 12.5.21; 12.12 before 12.12.3; 2025.0 before 2026.2.3; 2026.3 before 2026.3.2
CVE-2026-13371
4.9
1%
Jul 2
WatchGuard Firebox Management Web UI Denial of Service via Unsafe Deserialization
Affected: 2025.1 before 2026.2.1; 12.5 before 12.5.19; 12.0 before 12.12.1
CVE-2026-3344
4.9
0%
Mar 3
WatchGuard Firebox System Integrity Check Bypass
Affected: 12.0 before 12.11.8; 12.5.9 before 12.5.17; 2025.1 before 2026.1.2
CVE-2026-13377
4.8
0%
Jul 2
WatchGuard Firebox Stored Cross-Site-Scripting (XSS) Vulnerability in SIP Proxy Configuration
Affected: 12.0 before 12.12.1; 2025.1 before 2026.2.1; 12.5 through 12.5.18
CVE-2026-13376
4.8
0%
Jul 2
WatchGuard Firebox Stored Cross-Site-Scripting (XSS) Vulnerability in spamBlocker Module
Affected: 12.0 before 12.12.1; 2025.1 before 2026.2.1; 12.5 through 12.5.18
CVE-2026-13375
4.8
0%
Jul 2
WatchGuard Firebox Stored Cross-Site-Scripting (XSS) Vulnerability in Autotask Technology Integration Configuration
Affected: 12.4 before 12.12.1; 2025.1 before 2026.2.1; 12.5 through 12.5.18
CVE-2026-13374
4.8
0%
Jul 2
WatchGuard Firebox Stored Cross-Site-Scripting (XSS) Vulnerability in ConnectWise Technology Integration Configuration
Affected: 12.4 before 12.12.1; 2025.1 before 2026.2.1; 12.5 through 12.5.18
CVE-2026-13373
4.8
0%
Jul 2
WatchGuard Firebox Stored Cross-Site-Scripting (XSS) Vulnerability in Tigerpaw Technology Integration Configuration
Affected: 12.4 before 12.12.1; 2025.1 before 2026.2.1; 12.5 through 12.5.18
CVE-2025-6946
4.8
0%
Dec 4
WatchGuard Firebox Stored Cross-Site-Scripting (XSS) Vulnerability in IPS Configuration
Affected: 12.0.0 before 12.11.3; 12.5 before 12.5.13
CVE-2025-1071
4.8
0%
Feb 14
A stored cross-site scripting (XSS) vulnerability exists in the management interface of WatchGuard Firebox appliances via the spamBlocker module
Affected: 12.0.0 before 12.11.1; 12.5 before 12.5.13
CVE-2026-13728
4.4
0%
Jul 2
WatchGuard Firebox Hardcoded Fallback Encryption Key in Access Portal Resource Credential Database
Affected: 12.1 before 12.12.1; 2025.1 before 2026.2.1
Showing 29