WatchGuard Fireware OS vulnerabilities

CVEs per yearBy the year they were published

1. 20241
2. 202523
3. 202667

Known exploitedNewest addition to KEV first

• CVE-2025-14733

  WatchGuard Firebox iked Out of Bounds Write Vulnerability

  WatchGuard · Fireware OS

  ExploitedCritical9.3
• CVE-2025-9242

  WatchGuard Firebox iked Out of Bounds Write Vulnerability

  WatchGuard · Fireware OS

  ExploitedCritical9.3

Newest CVEs

• CVE-2026-90465

  Fireware OS Missing Authentication in FireCluster Sync Allows Privilege Escalation

  WatchGuard · Fireware OS

  High8.7
• CVE-2026-93862

  Fireware OS Out-of-Bounds Read in FireCluster Sync Allows Denial of Service

  WatchGuard · Fireware OS

  High7.2
• CVE-2026-112709

  Fireware OS Heap Buffer Overflow in AD Authentication Service Allows Pre-Authentication Remote Code Execution

  WatchGuard · Fireware OS

  Critical9.2
• CVE-2026-90464

  Fireware OS Missing Command Validation allows Authenticated Arbitrary File Modification as Root

  WatchGuard · Fireware OS

  High7.2
• CVE-2026-103593

  Fireware OS Stack Buffer Overflow in Logging Service Allows Remote Code Execution

  WatchGuard · Fireware OS

  Critical9.1
• CVE-2026-113881

  Fireware OS Stack Buffer Overflow in VPN Network Access Enforcement Allows Unprivileged Code Execution

  WatchGuard · Fireware OS

  Medium6.1
• CVE-2026-93434

  Fireware OS XPath Injection in SSH Authentication Allows Blind Extraction of Configuration Secrets

  WatchGuard · Fireware OS

  High8.7
• CVE-2026-90442

  Fireware OS Authenticated Stack Buffer Overflow in certd Allows Denial of Service

  WatchGuard · Fireware OS

  High8.6
• CVE-2026-112710

  Fireware OS Heap Buffer Overflow in AD Authentication Service Allows Pre-Authentication Remote Code Execution

  WatchGuard · Fireware OS

  Critical9.2
• CVE-2026-82332

  Fireware OS Improper Authentication in AuthPoint MFA Verification Allows Session Hijacking

  WatchGuard · Fireware OS

  Medium5.6