WatchGuard Fireware security vulnerabilities
Networking / NAS. Public CVE monitoring for WatchGuard Fireware. Vendor security advisories are linked on this page.
Built for Operators of this product.
41 public records · 0 security-fix timeline events. 0 published in the last 7 days. 26 store a version range.
What you can do here
Current vulnerabilities
KEV-first priority plus newest publications for this stack.
Verified security fixes
Timeline events and, for Odoo, Community Git patch evidence — not keyword-only guesses.
Monitoring
Watch this technology from your account when you want alerts on new matches.
Patch intelligence
Use version checkers and advisory links to confirm upgrades before you change production.
- Critical 0
- High 4
- Medium 1
- Low 0
2026-08-055 issues2026-11-02
Known exploited
View all known exploited- Critical9.3WatchGuard Firebox Out of Bounds Write VulnerabilityPatch nowKEVEPSS 29.42%Dec 18, 2025
- Critical9.3WatchGuard Firebox Out-of-Bounds Write VulnerabilityPatch nowKEVEPSS 92.22%Sep 17, 2025
- Critical9.8WatchGuard Firebox and XTM Appliances Arbitrary Code ExecutionPatch nowKEVEPSS 78.16%Mar 4, 2022
- High8.8WatchGuard Firebox and XTM Privilege Escalation VulnerabilityPatch nowKEVEPSS 10.80%Feb 24, 2022
Recently published
Browse catalog- High7.5ZDI-26-749: WatchGuard FireWare OS samld SAMLSession Deserialization of Untrusted Data Remote Code Execution VulnerabilityCheck if you run itEPSS 0.37%Sep 30, 2026
- High7.2ZDI-26-750: WatchGuard FireWare OS spamd statushdlr Stack-based Buffer Overflow Remote Code Execution VulnerabilityCheck if you run itEPSS 0.39%Sep 30, 2026
- High8.8ZDI-26-632: WatchGuard FireWare OS epm connect Stack-based Buffer Overflow Remote Code Execution VulnerabilityCheck if you run itEPSS 0.66%Sep 9, 2026
- High8.5Uncontrolled Search Path Element vulnerability in WatchGuard Agent on Windows allows Using Malicious Files.Check if you run itEPSS 0.13%May 6, 2026
- High8.5Use of Hard-coded Cryptographic Key vulnerability in WatchGuard Agent on Windows allows Inclusion of Code in Existing Process.Check if you run itEPSS 0.11%May 6, 2026
- High7.1Stack-based Buffer Overflow vulnerability in the WatchGuard Agent discovery service on Windows allows Overflow Buffers.Check if you run itEPSS 0.25%May 6, 2026
- High7.1Stack-based Buffer Overflow vulnerability in the WatchGuard Agent discovery service on Windows allows Overflow Buffers.Check if you run itEPSS 0.25%May 6, 2026
- Critical9.3WatchGuard Firebox Out of Bounds Write VulnerabilityPatch nowKEVEPSS 29.42%Dec 18, 2025
- High7.5A stack-based buffer overflow vulnerability [CWE-121] in WatchGuard Fireware OS's certificate request command could allow an authenticated privileged user to execute arbitrary codeCheck if you run itEPSS 0.35%Dec 4, 2025
- Medium6.3The WatchGuard Mobile VPN with SSL Client on Windows allows a locally authenticated non-administrative Windows user to escalate their privileges to NT AUTHORITY/SYSTEM on the WindoCheck if you run itEPSS 0.27%Dec 4, 2025