WatchGuard Fireware vulnerabilities
Filtered catalog for this technology stack. Use KEV and EPSS sorting to prioritize — then open each CVE for remediation and version matching.
41 matching records
- High7.3An incorrect permission assignment vulnerability in the WatchGuard Agent's log directory allows a local, authenticated non-administrative user to create, modify, appen…Check if you run itEPSS 0.13%Oct 22, 2026
- Medium6.9A cleartext storage of sensitive information vulnerability in WatchGuard Endpoint Security's Full Disk Encryption feature for macOS allows a local, unprivileged user o…Check if you run itEPSS 0.06%Oct 22, 2026
- High7.2ZDI-26-750: WatchGuard FireWare OS spamd statushdlr Stack-based Buffer Overflow Remote Code Execution VulnerabilityCheck if you run itEPSS 0.39%Sep 30, 2026
- High7.5ZDI-26-749: WatchGuard FireWare OS samld SAMLSession Deserialization of Untrusted Data Remote Code Execution VulnerabilityCheck if you run itEPSS 0.37%Sep 30, 2026
- High8.8ZDI-26-632: WatchGuard FireWare OS epm connect Stack-based Buffer Overflow Remote Code Execution VulnerabilityCheck if you run itEPSS 0.66%Sep 9, 2026
- High8.5Uncontrolled Search Path Element vulnerability in WatchGuard Agent on Windows allows Using Malicious Files.Check if you run itEPSS 0.13%May 6, 2026
- High8.5Use of Hard-coded Cryptographic Key vulnerability in WatchGuard Agent on Windows allows Inclusion of Code in Existing Process.Check if you run itEPSS 0.11%May 6, 2026
- High7.3Incorrect permission assignment for a resource in the patch management component of the WatchGuard Agent on Windows allows an authenticated local user to elevate their…Check if you run itEPSS 0.11%May 6, 2026
- High7.1Stack-based Buffer Overflow vulnerability in the WatchGuard Agent discovery service on Windows allows Overflow Buffers.Check if you run itEPSS 0.25%May 6, 2026
- High7.1Stack-based Buffer Overflow vulnerability in the WatchGuard Agent discovery service on Windows allows Overflow Buffers.Check if you run itEPSS 0.25%May 6, 2026
- High8.6A path traversal vulnerability in the Fireware OS Web UI on WatchGuard Firebox systems may allow a privileged authenticated remote attacker to execute arbitrary code i…Check if you run itEPSS 0.69%Apr 1, 2026
- High7.1A Cross-Site Request Forgery (CSRF) vulnerability in the WatchGuard Fireware OS WebUI could allow a remote attacker to trigger a denial-of-service (DoS) condition in t…Check if you run itEPSS 0.17%Mar 30, 2026
- High8.4An Insecure Deserialization vulnerability in WatchGuard Fireware OS allows an attacker that has obtained write access to the local filesystem through another vulnerabi…Check if you run itEPSS 0.27%Mar 30, 2026
- Medium6.9A vulnerability in WatchGuard Fireware OS may allow an attacker to bypass the Fireware OS filesystem integrity check and maintain limited persistence via a maliciously…Check if you run itEPSS 0.32%Mar 3, 2026
- Medium5.1A reflected cross-site scripting (XSS) vulnerability in the Fireware OS Web UI enabled execution of malicious JavaScript in the context of an authenticated management…Check if you run itEPSS 0.24%Mar 3, 2026
- High8.6An Out-of-bounds Write vulnerability in WatchGuard Fireware OS may allow an authenticated privileged administrator to execute arbitrary code with root permissions via…Check if you run itEPSS 6.43%Mar 3, 2026
- Critical9.3WatchGuard Firebox Out of Bounds Write VulnerabilityPatch nowKEVEPSS 29.42%Dec 18, 2025
- High7.5A stack-based buffer overflow vulnerability [CWE-121] in WatchGuard Fireware OS's certificate request command could allow an authenticated privileged user to execute arbitrary codeCheck if you run itEPSS 0.35%Dec 4, 2025
- Medium6.3The WatchGuard Mobile VPN with SSL Client on Windows allows a locally authenticated non-administrative Windows user to escalate their privileges to NT AUTHORITY/SYSTEM on the WindoCheck if you run itEPSS 0.27%Dec 4, 2025
- Medium4.8A stored cross-site scripting (XSS) vulnerability exists in the management interface of WatchGuard Firebox appliances via the IPS configuration.Check if you run itEPSS 0.24%Dec 4, 2025
- High8.2An XPath Injection vulnerability in WatchGuard Fireware OS may allow a remote unauthenticated attacker to retrieve sensitive information from the Firebox configuration through an eCheck if you run itEPSS 0.48%Dec 4, 2025
- High8.7A memory corruption vulnerability in WatchGuard Fireware OS may allow an unauthenticated attacker to trigger a Denial of Service (DoS) condition in the Mobile User VPN with IKEv2 aCheck if you run itEPSS 0.50%Dec 4, 2025
- Medium6.7An Expected Behavior Violation [CWE-440] vulnerability in WatchGuard Fireware OS may allow an attacker to bypass the Fireware OS boot time system integrity check and prevent the FiCheck if you run itEPSS 0.13%Dec 4, 2025
- Medium4.8Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in WatchGuard Fireware OS (Gateway Wireless Controller module) allows StorCheck if you run itEPSS 0.20%Dec 4, 2025
- Medium4.8Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in WatchGuard Fireware OS (Autotask Technology Integration module) allowsCheck if you run itEPSS 0.20%Dec 4, 2025