WatchGuard Fireware vulnerabilities
Filtered catalog for this technology stack. Use KEV and EPSS sorting to prioritize — then open each CVE for remediation and version matching.
41 matching records
- Medium4.8Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in WatchGuard Fireware OS (ConnectWise Technology Integration module) alloCheck if you run itEPSS 0.20%Dec 4, 2025
- Medium4.8Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in WatchGuard Fireware OS (Tigerpaw Technology Integration module) allowsCheck if you run itEPSS 0.20%Dec 4, 2025
- High8.6An Out-of-bounds Write vulnerability in WatchGuard Fireware OS's CLI could allow an authenticated privileged user to execute arbitrary code via a specially crafted CLI command.Check if you run itEPSS 0.62%Dec 4, 2025
- High8.6An Out-of-bounds Write vulnerability in WatchGuard Fireware OS's CLI could allow an authenticated privileged user to execute arbitrary code via specially crafted IPSec configuratioCheck if you run itEPSS 0.69%Dec 4, 2025
- High8.6An Out-of-bounds Write vulnerability in WatchGuard Fireware OS’s certificate request command could allow an authenticated privileged user to execute arbitrary code via specially crCheck if you run itEPSS 0.44%Dec 4, 2025
- Medium6.3A local privilege escalation vulnerability in the WatchGuard Mobile VPN with SSL client on Windows enables a local user to execute arbitrary commands with elevated privileges on thCheck if you run itEPSS 0.15%Oct 29, 2025
- High8.9An authenticated admin user with access to both the management WebUI and command line interface on a Firebox can enable a diagnostic debug shell by uploading a platform and versionCheck if you run itEPSS 0.32%Oct 24, 2025
- Critical9.3WatchGuard Firebox Out-of-Bounds Write VulnerabilityPatch nowKEVEPSS 92.22%Sep 17, 2025
- Medium4.8A stored cross-site scripting (XSS) vulnerability exists in the management interface of WatchGuard Firebox appliances via the SIP Proxy configuration.Check if you run itEPSS 0.48%Sep 15, 2025
- Medium6.9An HTTP Request Smuggling [CWE-444] vulnerability in the Authentication portal of WatchGuard Fireware OS allows a remote attacker to evade request parameter sanitation and performCheck if you run itEPSS 0.45%Sep 15, 2025
- High7.5A vulnerability was identified in Tenda AC15 15.13.07.13.Check if you run itEPSS 0.44%Aug 14, 2025
- Medium4.8A stored cross-site scripting (XSS) vulnerability exists in the management interface of WatchGuard Firebox appliances via the Access Portal configuration.Check if you run itEPSS 0.57%May 16, 2025
- Medium4.8Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in WatchGuard Fireware OS allows Stored XSS via the spamBlocker module.Check if you run itEPSS 0.46%May 16, 2025
- Critical9.8WatchGuard Firebox and XTM Appliances Arbitrary Code ExecutionPatch nowKEVEPSS 78.16%Mar 4, 2022
- High8.8WatchGuard Firebox and XTM Privilege Escalation VulnerabilityPatch nowKEVEPSS 10.80%Feb 24, 2022
- UnknownWatchGuard RapidStream Appliances Command ExecutionPatch nowKEVEPSS 1.24%Sep 28, 2016