[ Vendor · 28 CVEs ]
WatchGuard
CVEs affecting WatchGuard published in the last 30 days, plus any WatchGuard CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-96293 | 22 Oct 2026 | CVSS 6.9 | WatchGuard AgentA cleartext storage of sensitive information vulnerability in WatchGuard Endpoint Security's Full Disk Encryption feature for macOS allows a local… | |
| CVE-2026-115253 | 22 Oct 2026 | CVSS 7.3 | WatchGuard AgentAn incorrect permission assignment vulnerability in the WatchGuard Agent's log directory allows a local, authenticated non-administrative user to… | |
| CVE-2026-13043 | 1 Oct 2026 | CVSS 8.8 | WatchGuard Endpoint SecurityA missing authentication vulnerability in the Kernel Memory Access Driver (PSKMAD) used by WatchGuard endpoint security products allows a local… | Fix |
| CVE-2026-86134 | 30 Sep 2026 | CVSS 7.5 | WatchGuard Fireware OSA NULL pointer dereference vulnerability in the WatchGuard Fireware OS authentication process allows a remote, unauthenticated attacker to crash the… | Fix |
| CVE-2026-86133 | 30 Sep 2026 | CVSS 7.5 | WatchGuard Fireware OSAn integer underflow vulnerability in the WatchGuard Fireware OS IKE daemon (iked) allows a remote attacker who has completed the initial IKEv2… | Fix |
| CVE-2026-86136 | 30 Sep 2026 | CVSS 8.1 | WatchGuard Fireware OSA missing authorization vulnerability in the wgagent management daemon's session initialization function allows an authenticated, low-privileged user… | Fix |
| CVE-2026-90441 | 30 Sep 2026 | CVSS 8.1 | WatchGuard Fireware OSA missing authorization vulnerability in the wgagent management daemon's session initialization function allows an authenticated, low-privileged user… | Fix |
| CVE-2026-18145 | 30 Sep 2026 | CVSS 7.2 | WatchGuard Fireware OSA stack-based buffer overflow vulnerability in the spamBlocker (spamd) service of WatchGuard Fireware OS allows an authenticated attacker with… | Fix |
| CVE-2026-81433 | 30 Sep 2026 | CVSS 8.7 | WatchGuard Fireware OSA stack-based buffer overflow vulnerability in WatchGuard Fireware OS's DHCP fingerprinting daemon (fingerd) allows an unauthenticated attacker with… | |
| CVE-2026-86101 | 30 Sep 2026 | CVSS 6.5 | WatchGuard Fireware OSAn improper authorization vulnerability in WatchGuard Fireware OS's SAML login process allows a remote, authenticated SAML user with access only to… | Fix |
| CVE-2026-86104 | 30 Sep 2026 | CVSS 7.5 | WatchGuard Fireware OSAn uncontrolled resource consumption vulnerability in the Fireware OS login process (wgagent) allows a remote, unauthenticated attacker to cause a… | Fix |
| CVE-2026-86105 | 30 Sep 2026 | CVSS 7.1 | WatchGuard Fireware OSAn improper authorization vulnerability in Fireware OS's Access Portal reverse proxy allows an authenticated, low-privileged Access Portal user to… | Fix |
| CVE-2026-86128 | 30 Sep 2026 | CVSS 7.5 | WatchGuard Fireware OSA NULL pointer dereference vulnerability in Fireware OS's NetFlow packet-processing feature allows a remote, unauthenticated attacker to cause a… | Fix |
| CVE-2026-86131 | 30 Sep 2026 | CVSS 9.8 | WatchGuard Fireware OSA code injection vulnerability in WatchGuard Fireware OS's BOVPN Over TLS client configuration handling allows an attacker who controls the remote… | Fix |
| CVE-2026-86132 | 30 Sep 2026 | CVSS 7.5 | WatchGuard Fireware OSAn integer underflow vulnerability in the WatchGuard Fireware OS IKEv2 daemon (iked) allows a remote, unauthenticated attacker to crash the process… | Fix |
| CVE-2026-13046 | 30 Sep 2026 | CVSS 7.2 | WatchGuard Fireware OSA deserialization of untrusted data vulnerability in WatchGuard Fireware OS's SAML single sign-on session handling (samld) allows an attacker who has… | Fix |
| CVE-2026-13224 | 30 Sep 2026 | CVSS 4.9 | WatchGuard Fireware OSA path traversal vulnerability in the Fireware OS WebUI management agent allows an authenticated administrator to read or list arbitrary files on the… | Fix |
| CVE-2026-18105 | 30 Sep 2026 | CVSS 6.5 | WatchGuard Fireware OSAn uncontrolled resource consumption vulnerability in Fireware OS's diagnostic tasks feature allows a low-privileged, authenticated user to cause a… | Fix |
| CVE-2026-86102 | 28 Sep 2026 | CVSS 9.3 | WatchGuard APAn OS command injection vulnerability in the WatchGuard AP internal API service allows an attacker with network access to the AP to execute arbitrary… | |
| CVE-2026-87969 | 28 Sep 2026 | CVSS 8.6 | WatchGuard APAn OS command injection vulnerability in the WatchGuard AP diagnostic CLI allows an authenticated administrator to execute arbitrary operating system… | |
| CVE-2026-101891 | 28 Sep 2026 | CVSS 9.3 | WatchGuard APAn improper access control vulnerability in an internal API service on WatchGuard Access Points allows an unauthenticated attacker with network… | |
| CVE-2026-95676 | 23 Sep 2026 | CVSS 7.5 | WatchGuard AuthPoint Authentication GatewayA missing/improper authentication vulnerability in the WatchGuard AuthPoint Gateway's LDAP Sync first-factor authentication allows a remote attacker… | Fix |
| CVE-2025-14733 | 19 Dec 2025 | CVSS 9.8 | WatchGuard Firebox Out of Bounds WriteAn Out-of-bounds Write vulnerability in the WatchGuard Fireware OS iked process may allow a remote unauthenticated attacker to execute arbitrary… | Exploited |
| CVE-2025-9242 | 17 Sep 2025 | CVSS 9.8 | WatchGuard Firebox Out-of-Bounds WriteAn Out-of-bounds Write vulnerability in the WatchGuard Fireware OS iked process may allow a remote unauthenticated attacker to execute arbitrary… | Exploited |
| CVE-2022-26318 | 4 Mar 2022 | CVSS 9.8 | WatchGuard Firebox and XTM Appliances Arbitrary Code ExecutionOn WatchGuard Firebox and XTM appliances, an unauthenticated user can execute arbitrary code, aka FBX-22786. This vulnerability impacts Fireware OS… | Exploited |
| CVE-2022-26318 | 4 Mar 2022 | CVSS 9.8 | WatchGuard Firebox and XTM Appliances Arbitrary Code ExecutionOn WatchGuard Firebox and XTM appliances, an unauthenticated user can execute arbitrary code, aka FBX-22786. This vulnerability impacts Fireware OS… | Exploited |
| CVE-2022-23176 | 24 Feb 2022 | CVSS 8.8 | WatchGuard Firebox and XTM Privilege EscalationWatchGuard Firebox and XTM appliances allow a remote attacker with unprivileged credentials to access the system with a privileged management session… | Exploited |
| CVE-2022-23176 | 24 Feb 2022 | CVSS 8.8 | WatchGuard Firebox and XTM Privilege EscalationWatchGuard Firebox and XTM appliances allow a remote attacker with unprivileged credentials to access the system with a privileged management session… | Exploited |