WA
Vendor
Watchguard
259
CVEs
10
On KEV
53
New 30D
Products
FO9.8
Fireware OS
WatchGuard
62 CVEs2 on KEV32 new
FI9.8
Fireware
Watchguard
75 CVEs4 on KEV14 new
WA9.3
WatchGuard AP
WatchGuard
3 CVEs0 on KEV3 new
WA9.4
WatchGuard Agent
WatchGuard
9 CVEs0 on KEV2 new
MV7.8
Mobile VPN with SSL Client
WatchGuard
2 CVEs0 on KEV1 new
ES8.8
Endpoint Security
WatchGuard
1 CVEs0 on KEV1 new
FI9.8
Firebox
WatchGuard
6 CVEs2 on KEV0 new
FA8.8
Firebox and XTM
WatchGuard
1 CVEs1 on KEV0 new
FA9.8
Firebox and XTM Appliances
WatchGuard
1 CVEs1 on KEV0 new
DI9.3
Dimension
WatchGuard
17 CVEs0 on KEV0 new
SF–
Soho Firewall
Watchguard
8 CVEs0 on KEV0 new
AG7.8
Agent
Watchguard
5 CVEs0 on KEV0 new
AF9.8
Ap100 Firmware
Watchguard
4 CVEs0 on KEV0 new
AF9.8
Ap102 Firmware
Watchguard
4 CVEs0 on KEV0 new
AF9.8
Ap200 Firmware
Watchguard
4 CVEs0 on KEV0 new
EF7.8
Edr Firmware
Watchguard
4 CVEs0 on KEV0 new
EF7.8
Epdr Firmware
Watchguard
4 CVEs0 on KEV0 new
EF7.8
Epp Firmware
Watchguard
4 CVEs0 on KEV0 new
FI–
Firebox II
Watchguard
4 CVEs0 on KEV0 new
PA7.8
Panda Ad360 Firmware
Watchguard
4 CVEs0 on KEV0 new
AG9.1
Authentication Gateway
Watchguard
3 CVEs0 on KEV0 new
MV7.8
Mobile Vpn With Ssl
Watchguard
3 CVEs0 on KEV0 new
XC–
Xcs
Watchguard
3 CVEs0 on KEV0 new
AF9.8
Ap300 Firmware
Watchguard
2 CVEs0 on KEV0 new
PA7.8
Panda Antivirus
Watchguard
2 CVEs0 on KEV0 new
SE–
Serverlock
Watchguard
2 CVEs0 on KEV0 new
SS9.1
Single Sign-on Client
Watchguard
2 CVEs0 on KEV0 new
AH7.5
AD Helper Firmware
Watchguard
1 CVEs0 on KEV0 new
AA7.5
AuthPoint Authentication Gateway
WatchGuard
1 CVEs0 on KEV0 new
F2–
Firebox 2500
Watchguard
1 CVEs0 on KEV0 new
F4–
Firebox 4500
Watchguard
1 CVEs0 on KEV0 new
FP–
Firebox Pptp Vpn
Watchguard
1 CVEs0 on KEV0 new
FX6.1
Fireware Xtm
Watchguard
1 CVEs0 on KEV0 new
HG8.8
Hawkeye G
Watchguard
1 CVEs0 on KEV0 new
IM7.6
Ipsec Mobile Vpn Client
Watchguard
1 CVEs0 on KEV0 new
LR–
Legacy Rssa
Watchguard
1 CVEs0 on KEV0 new
PD7.8
Panda Dome
Watchguard
1 CVEs0 on KEV0 new
PE7.8
Panda Endpoint Administration Agent
Watchguard
1 CVEs0 on KEV0 new
PM5.9
Panda Mobile Security
Watchguard
1 CVEs0 on KEV0 new
PS6.5
Panda Security Vpn
Watchguard
1 CVEs0 on KEV0 new
PU7.8
Panda Url Filtering
Watchguard
1 CVEs0 on KEV0 new
RA7.8
Rapidstream
Watchguard
1 CVEs0 on KEV0 new
SC–
Server Center
Watchguard
1 CVEs0 on KEV0 new
SO–
Soho
Watchguard
1 CVEs0 on KEV0 new
VC–
Vclass
Watchguard
1 CVEs0 on KEV0 new
WS–
Watchguard System Manager
Watchguard
1 CVEs0 on KEV0 new
XF6.1
Xmt515 Firmware
Watchguard
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-115495 New | MV Mobile VPN with SSL Client WatchGuard | 5.7 | Oct 27 | Mobile VPN with SSL Client for Windows: Cleartext Transmission of VPN Credentials over Local Management Socket |
| CVE-2026-90465 New | FO Fireware OS WatchGuard | 9.4 | Oct 27 | Fireware OS Missing Authentication in FireCluster Sync Allows Privilege Escalation |
| CVE-2026-93862 New | FO Fireware OS WatchGuard | 7.2 | Oct 27 | Fireware OS Out-of-Bounds Read in FireCluster Sync Allows Denial of Service |
| CVE-2026-112709 New | FO Fireware OS WatchGuard | 9.2 | Oct 27 | Fireware OS Heap Buffer Overflow in AD Authentication Service Allows Pre-Authentication Remote Code Execution |
| CVE-2026-90464 New | FO Fireware OS WatchGuard | 7.2 | Oct 27 | Fireware OS Missing Command Validation allows Authenticated Arbitrary File Modification as Root |
| CVE-2026-103593 New | FO Fireware OS WatchGuard | 7.1 | Oct 27 | Fireware OS Stack Buffer Overflow in Logging Service Allows Remote Code Execution |
| CVE-2026-113881 New | FO Fireware OS WatchGuard | 6.1 | Oct 27 | Fireware OS Stack Buffer Overflow in VPN Network Access Enforcement Allows Unprivileged Code Execution |
| CVE-2026-93434 New | FO Fireware OS WatchGuard | 8.7 | Oct 27 | Fireware OS XPath Injection in SSH Authentication Allows Blind Extraction of Configuration Secrets |
| CVE-2026-90442 New | FO Fireware OS WatchGuard | 8.6 | Oct 27 | Fireware OS Authenticated Stack Buffer Overflow in certd Allows Denial of Service |
| CVE-2026-112710 New | FO Fireware OS WatchGuard | 9.2 | Oct 27 | Fireware OS Heap Buffer Overflow in AD Authentication Service Allows Pre-Authentication Remote Code Execution |
| CVE-2026-82332 New | FO Fireware OS WatchGuard | 5.7 | Oct 27 | Fireware OS Improper Authentication in AuthPoint MFA Verification Allows Session Hijacking |
| CVE-2026-93857 New | FO Fireware OS WatchGuard | 9.2 | Oct 27 | Fireware OS Pre-Authentication Stack Buffer Overflow in SIP Proxy Allows Remote Code Execution |
| CVE-2026-93866 New | FO Fireware OS WatchGuard | 9.2 | Oct 27 | Fireware OS Pre-Authentication Integer Overflow in Access Portal Allows Out-of-Bounds Write |
| CVE-2026-93864 New | FO Fireware OS WatchGuard | 7.1 | Oct 27 | Fireware OS Link Following in firewalld Allows Local Arbitrary File Overwrite as Root |
| CVE-2026-103594 New | FO Fireware OS WatchGuard | 9.5 | Oct 27 | Fireware OS Stack Buffer Overflow in WireGuard Configuration Allows Remote Code Execution |
| CVE-2026-104381 New | FO Fireware OS WatchGuard | 6.0 | Oct 27 | Fireware OS Missing Authentication in FireCluster State Sync Allows BOVPN Tunnel Denial of Service |
| CVE-2026-111107 New | FO Fireware OS WatchGuard | 8.7 | Oct 27 | Fireware OS NULL Pointer Dereference in Management Interface Allows Unauthenticated Denial of Service |
| CVE-2026-93865 New | FO Fireware OS WatchGuard | 9.2 | Oct 27 | Fireware OS Missing Authentication in FireCluster Sync Daemon Allows Remote Root Action Injection |
| CVE-2026-115253 New | WA WatchGuard Agent WatchGuard | 7.3 | Oct 22 | WatchGuard Agent Incorrect Permission Assignment in Log Directory Allows Local Log Tampering |
| CVE-2026-96293 New | WA WatchGuard Agent WatchGuard | 6.9 | Oct 22 | Endpoint Security Cleartext Storage of FileVault Recovery Key in Log File |
| CVE-2026-13043 | ES Endpoint Security WatchGuard | 8.8 | Oct 1 | WatchGuard Endpoint Security Missing Authentication in Kernel Memory Access Driver Allows Arbitrary Kernel Memory Access |
| CVE-2026-86134 | FO Fireware OS WatchGuard | 7.5 | Sep 30 | Fireware OS Pre-Authentication NULL Pointer Dereference Allows Remote Denial of Service |
| CVE-2026-86104 | FO Fireware OS WatchGuard | 7.5 | Sep 29 | Fireware OS Resource Exhaustion in Login Process Allows Denial of Service |
| CVE-2026-18145 | FO Fireware OS WatchGuard | 7.2 | Sep 29 | Fireware OS Stack-based Buffer Overflow in spamd Allows Remote Code Execution |
| CVE-2026-86101 | FO Fireware OS WatchGuard | 6.5 | Sep 29 | Fireware OS Authorization Bypass in SAML Login Allows Unauthorized SSLVPN Access |
| CVE-2026-13046 | FO Fireware OS WatchGuard | 7.2 | Sep 29 | Fireware OS Deserialization of Untrusted Data in samld Allows Remote Code Execution |
| CVE-2026-86131 | FO Fireware OS WatchGuard | 9.8 | Sep 29 | Fireware OS Code Injection in BOVPN Over TLS Client Allows Remote Code Execution |
| CVE-2026-13224 | FO Fireware OS WatchGuard | 4.9 | Sep 29 | Fireware OS Path Traversal in WebUI Management Agent Allows Arbitrary Local File Read |
| CVE-2026-86133 | FO Fireware OS WatchGuard | 7.5 | Sep 29 | Fireware OS Pre-Authentication Integer Underflow in iked Allows Remote Denial of Service |
| CVE-2026-90441 | FO Fireware OS WatchGuard | 8.1 | Sep 29 | Fireware OS Missing Authorization in wgagent Management API Allows Denial of Service - Variant B |
| CVE-2026-18105 | FO Fireware OS WatchGuard | 6.5 | Sep 29 | Fireware OS Uncontrolled Resource Consumption in Diagnostic Tasks Allows Denial of Service |
| CVE-2026-86105 | FO Fireware OS WatchGuard | 7.1 | Sep 29 | Fireware OS Improper Authorization in Access Portal Reverse Proxy |
| CVE-2026-86136 | FO Fireware OS WatchGuard | 8.1 | Sep 29 | Fireware OS Missing Authorization in wgagent Management API Allows Denial of Service - Variant A |
| CVE-2026-86132 | FO Fireware OS WatchGuard | 7.5 | Sep 29 | Fireware OS Pre-Authentication Integer Underflow in iked Allows Denial of Service |
| CVE-2026-86128 | FO Fireware OS WatchGuard | 7.5 | Sep 29 | Fireware OS NULL Pointer Dereference in NetFlow IPv6 Traffic Processing Allows Remote Denial of Service |
| CVE-2026-81433 | FO Fireware OS WatchGuard | 8.7 | Sep 29 | Fireware OS Pre-Authentication Stack Buffer Overflow in fingerd Allows Remote Code Execution |
| CVE-2026-86102 | WA WatchGuard AP WatchGuard | 9.3 | Sep 28 | WatchGuard AP Command Injection in Internal Management API Allows Command Execution |
| CVE-2026-87969 | WA WatchGuard AP WatchGuard | 8.6 | Sep 28 | WatchGuard AP Authenticated Command Injection in Diagnostic CLI |
| CVE-2026-101891 | WA WatchGuard AP WatchGuard | 9.3 | Sep 28 | WatchGuard AP Improper Access Control in API Service Allows Unauthenticated Access |
| CVE-2026-95676 | AA AuthPoint Authentication Gateway WatchGuard | 7.5 | Sep 23 | AuthPoint Gateway Improper Authentication in LDAP Sync Allows First-Factor Authentication Bypass |
| CVE-2026-86135 | DI Dimension WatchGuard | 7.0 | Sep 8 | Dimension CSRF Vulnerability in Database Snapshot Creation Allows Denial of Service |
| CVE-2026-78616 | DI Dimension WatchGuard | 4.8 | Aug 27 | Dimension Stored XSS via Trusted CA Certificate Configuration |
| CVE-2026-78498 | DI Dimension WatchGuard | 5.1 | Aug 27 | Dimension Server-Side Request Forgery via Email Server Test Settings |
| CVE-2026-78612 | DI Dimension WatchGuard | 8.6 | Aug 27 | Dimension SQL Injection in Scheduled Report |
| CVE-2026-78103 | DI Dimension WatchGuard | 5.1 | Aug 27 | Dimension Log Server Configuration Lock Bypass Vulnerability |
| CVE-2026-78615 | DI Dimension WatchGuard | 4.6 | Aug 27 | WatchGuard Dimension Reflected DOM-Based XSS in Report Detail Page |
| CVE-2026-78613 | DI Dimension WatchGuard | 8.6 | Aug 27 | Dimension SQL Injection in Log Viewer |
| CVE-2026-78495 | DI Dimension WatchGuard | 5.3 | Aug 27 | Dimension Server-Side Request Forgery via Remote Backup Connection Test |
| CVE-2026-78617 | DI Dimension WatchGuard | 6.3 | Aug 27 | WatchGuard Dimension Web UI Authentication Brute-Force Due to Missing Rate Limiting |
| CVE-2026-78047 | DI Dimension WatchGuard | 5.1 | Aug 27 | Dimension Stored XSS in Scheduled Report Task |
| CVE-2026-78610 | DI Dimension WatchGuard | 8.4 | Aug 27 | Dimension CSRF Vulnerability in Administrator Passphrase Change Endpoint |
| CVE-2026-78499 | DI Dimension WatchGuard | 5.1 | Aug 27 | Dimension SSRF via FTP Server Test Connection |
| CVE-2026-78174 | DI Dimension WatchGuard | 9.3 | Aug 27 | WatchGuard Dimension Session Hijack via Exposed Session Tokens in Diagnostic Logs |
| CVE-2026-78618 | DI Dimension WatchGuard | 6.9 | Aug 27 | Dimension Business Logic Flaw Allows Chained Backend Object Operations |
| CVE-2026-78500 | DI Dimension WatchGuard | 5.1 | Aug 27 | Dimension Blind SSRF via Database Test Connection Feature |
| CVE-2026-13108 | DI Dimension WatchGuard | 8.7 | Aug 27 | Dimension Denial-of-Service |
| CVE-2026-78614 | DI Dimension WatchGuard | 8.6 | Aug 27 | Dimension SQL Injection in Audit Report |
| CVE-2026-19315 | FO Fireware OS WatchGuard | 9.3 | Aug 27 | Fireware OS Pre-Authentication Type Confusion in iked Allows Remote Code Execution |
| CVE-2026-19314 | FO Fireware OS WatchGuard | 8.7 | Aug 27 | Fireware OS Integer Underflow in iked Allows Unauthenticated Denial of Service (DoS) |
| CVE-2026-19317 | FO Fireware OS WatchGuard | 8.7 | Aug 27 | Fireware OS Pre-Authentication Out-of-Bounds Read in iked Allows Denial of Service (DoS) |