Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- High7.2ZDI-26-750: WatchGuard FireWare OS spamd statushdlr Stack-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 0.4%Sep 30, 2026
- High7.5ZDI-26-749: WatchGuard FireWare OS samld SAMLSession Deserialization of Untrusted Data Remote Code Execution VulnerabilityEPSS 0.4%Sep 30, 2026
- High8.8ZDI-26-632: WatchGuard FireWare OS epm connect Stack-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 0.4%Sep 9, 2026
- High8.5Uncontrolled Search Path Element vulnerability in WatchGuard Agent on Windows allows Using Malicious Files.May 6, 2026
- High8.5Use of Hard-coded Cryptographic Key vulnerability in WatchGuard Agent on Windows allows Inclusion of Code in Existing Process.May 6, 2026
- High7.3Incorrect permission assignment for a resource in the patch management component of the WatchGuard Agent on Windows allows an authenticated local user to elevate their…May 6, 2026
- High7.1Stack-based Buffer Overflow vulnerability in the WatchGuard Agent discovery service on Windows allows Overflow Buffers.May 6, 2026
- High7.1Stack-based Buffer Overflow vulnerability in the WatchGuard Agent discovery service on Windows allows Overflow Buffers.May 6, 2026
- High8.6A path traversal vulnerability in the Fireware OS Web UI on WatchGuard Firebox systems may allow a privileged authenticated remote attacker to execute arbitrary code i…Apr 1, 2026
- High7.1A Cross-Site Request Forgery (CSRF) vulnerability in the WatchGuard Fireware OS WebUI could allow a remote attacker to trigger a denial-of-service (DoS) condition in t…Mar 30, 2026
- High8.4An Insecure Deserialization vulnerability in WatchGuard Fireware OS allows an attacker that has obtained write access to the local filesystem through another vulnerabi…Mar 30, 2026
- Medium6.9A vulnerability in WatchGuard Fireware OS may allow an attacker to bypass the Fireware OS filesystem integrity check and maintain limited persistence via a maliciously…Mar 3, 2026
- Medium5.1A reflected cross-site scripting (XSS) vulnerability in the Fireware OS Web UI enabled execution of malicious JavaScript in the context of an authenticated management…Mar 3, 2026
- High8.6An Out-of-bounds Write vulnerability in WatchGuard Fireware OS may allow an authenticated privileged administrator to execute arbitrary code with root permissions via…Mar 3, 2026
- Critical9.3WatchGuard Firebox Out of Bounds Write VulnerabilityKEVEPSS 26.5%Dec 18, 2025
- Critical9.3WatchGuard Firebox Out-of-Bounds Write VulnerabilityKEVEPSS 91.8%Sep 17, 2025
- Critical9.8WatchGuard Firebox and XTM Appliances Arbitrary Code ExecutionKEVEPSS 78.2%Mar 4, 2022
- High8.8WatchGuard Firebox and XTM Privilege Escalation VulnerabilityKEVEPSS 10.8%Feb 24, 2022
18 records · page 1 of 1
PreviousNext