What’s Vulnerable › Products

WatchGuard Fireware OS vulnerabilities

96 known vulnerabilities, 4 confirmed exploited in the wild (CISA KEV), 74 published in the last 12 months.

Check whether your WatchGuard Fireware OS version is affected

Exploited WatchGuard Fireware OS vulnerabilities

• CVE-2025-14733 — WatchGuard Firebox Out of Bounds Write Vulnerability
• CVE-2025-9242 — WatchGuard Firebox Out-of-Bounds Write Vulnerability
• CVE-2022-23176 — WatchGuard Firebox and XTM Privilege Escalation Vulnerability
• CVE-2022-26318 — WatchGuard Firebox and XTM Appliances Arbitrary Code Execution

Latest WatchGuard Fireware OS vulnerabilities

• CVE-2026-86134 — Fireware OS Pre-Authentication NULL Pointer Dereference Allows Remote Denial of Service (CVSS 7.5)
• CVE-2026-90441 — Fireware OS Missing Authorization in wgagent Management API Allows Denial of Service - Variant B (CVSS 8.1)
• CVE-2026-86136 — Fireware OS Missing Authorization in wgagent Management API Allows Denial of Service - Variant A (CVSS 8.1)
• CVE-2026-86133 — Fireware OS Pre-Authentication Integer Underflow in iked Allows Remote Denial of Service (CVSS 7.5)
• CVE-2026-86132 — Fireware OS Pre-Authentication Integer Underflow in iked Allows Denial of Service (CVSS 7.5)
• CVE-2026-86131 — Fireware OS Code Injection in BOVPN Over TLS Client Allows Remote Code Execution (CVSS 9.8)
• CVE-2026-86128 — Fireware OS NULL Pointer Dereference in NetFlow IPv6 Traffic Processing Allows Remote Denial of Service (CVSS 7.5)
• CVE-2026-86105 — Fireware OS Improper Authorization in Access Portal Reverse Proxy (CVSS 7.1)
• CVE-2026-86104 — Fireware OS Resource Exhaustion in Login Process Allows Denial of Service (CVSS 7.5)
• CVE-2026-86101 — Fireware OS Authorization Bypass in SAML Login Allows Unauthorized SSLVPN Access (CVSS 6.5)
• CVE-2026-81433 — Fireware OS Pre-Authentication Stack Buffer Overflow in fingerd Allows Remote Code Execution (CVSS 8.7)
• CVE-2026-18145 — Fireware OS Stack-based Buffer Overflow in spamd Allows Remote Code Execution (CVSS 7.2)
• CVE-2026-18105 — Fireware OS Uncontrolled Resource Consumption in Diagnostic Tasks Allows Denial of Service (CVSS 6.5)
• CVE-2026-13224 — Fireware OS Path Traversal in WebUI Management Agent Allows Arbitrary Local File Read (CVSS 4.9)
• CVE-2026-13046 — Fireware OS Deserialization of Untrusted Data in samld Allows Remote Code Execution (CVSS 7.2)
• CVE-2026-78011 — Fireware OS Integer Underflow in Iked Allows Unauthenticated Denial of Service (DoS) (CVSS 8.7)
• CVE-2026-78010 — Fireware OS Stack-Based Buffer Overflow in iked Allows Unauthenticated Denial of Service (CVSS 8.7)
• CVE-2026-78009 — Fireware OS Out-of-Bounds Read in iked Allows Unauthenticated Denial of Service (DoS) (CVSS 8.7)
• CVE-2026-78008 — Fireware OS Authenticated Buffer Overflow in wgagent (CVSS 8.6)
• CVE-2026-19318 — Fireware OS Pre-Authentication Stack Buffer Overflow in iked Allows Remote Code Execution (CVSS 9.3)
• CVE-2026-19317 — Fireware OS Pre-Authentication Out-of-Bounds Read in iked Allows Denial of Service (DoS) (CVSS 8.7)
• CVE-2026-19316 — Fireware OS Pre-Authentication Double Free in iked Allows Denial of Service (DoS) (CVSS 8.7)
• CVE-2026-19315 — Fireware OS Pre-Authentication Type Confusion in iked Allows Remote Code Execution (CVSS 9.3)
• CVE-2026-19314 — Fireware OS Integer Underflow in iked Allows Unauthenticated Denial of Service (DoS) (CVSS 8.7)
• CVE-2026-19313 — Fireware OS Pre-Authentication Heap Buffer Overflow in iked Allows Remote Code Execution (CVSS 9.3)