Watchguard

163 CVEs across 132 Watchguard products. Browse Watchguard vulnerabilities, severities, and proof-of-concept exploits.

Watchguard products with known CVEs

ProductCVEs
Fireware61
Fireware OS60
Firebox M27041
Firebox M29041
Firebox M37041
Firebox M39041
Firebox M44041
Firebox M47041
Firebox M480041
Firebox M57041
Firebox M580041
Firebox M59041
Firebox M67041
Firebox M69041
Firebox T2041
Firebox T4041
Firebox T5541
Firebox T7041
Firebox T8041
Fireboxv41
Firebox M460039
Firebox M560039
Firebox Nv539
Firebox T2539
Firebox T4539
Firebox T8539
Firebox T115-W35
Firebox T12535
Firebox T125-W35
Firebox T14535
Firebox T145-W35
Firebox T1535
Firebox T18535
Firebox T3535
Fireboxcloud32
Firebox M29525
Firebox M39525
Firebox M49525
Firebox M59525
Firebox M69525
Dimension18
Firebox Cloud9
Soho Firewall8
Watchguard Agent7
Agent5
Epdr5
Mobile Vpn With SSL Client5
Ap1004
Ap100 Firmware4
Ap1024
Watchguard CVEs — newest first (page 1 of 2)
CVESeverityScorePublishedSummary
CVE-2026-879692026-09-28An OS command injection vulnerability in the WatchGuard AP diagnostic CLI allows an authenticated administrator to execute arbitrary operating system commands…
CVE-2026-1018912026-09-28An improper access control vulnerability in an internal API service on WatchGuard Access Points allows an unauthenticated attacker with network access to the A…
CVE-2026-956762026-09-23A missing/improper authentication vulnerability in the WatchGuard AuthPoint Gateway's LDAP Sync first-factor authentication allows a remote attacker to bypass…
CVE-2026-861352026-09-08A Cross-Site Request Forgery (CSRF) vulnerability in WatchGuard Dimension's database snapshot creation feature allows a remote attacker to trigger unauthorized…
CVE-2026-786182026-08-28A business logic flaw in WatchGuard Dimension allows an authenticated administrator to trigger multiple backend operations within a single logical flow by send…
CVE-2026-786172026-08-28WatchGuard Dimension's web login endpoint does not enforce effective rate-limiting or account lockout by default allowing a remote attacker to perform automate…
CVE-2026-786162026-08-28A Stored Cross-Site Scripting (XSS) vulnerability in WatchGuard Dimension's Trusted CA certificate configuration allows an authenticated administrator to execu…
CVE-2026-786152026-08-28A Reflected Cross-Site Scripting (XSS) vulnerability in WatchGuard Dimension's report detail page allows an attacker to execute arbitrary JavaScript in a authe…
CVE-2026-786142026-08-28WatchGuard Dimension contains an authenticated SQL injection vulnerability in the audit report feature which allows an authenticated user with report administr…
CVE-2026-786132026-08-28WatchGuard Dimension contains an authenticated SQL injection vulnerability in the log viewer feature which allows an authenticated user with report administrat…
CVE-2026-786122026-08-28WatchGuard Dimension contains an authenticated SQL injection vulnerability in the scheduled report feature which allows an authenticated user with report admin…
CVE-2026-786102026-08-28WatchGuard Dimension's Web UI exposes an administrator passphrase change action that lacks CSRF protection. An attacker who can induce an authenticated global…
CVE-2026-785002026-08-28A blind server-side request forgery (SSRF) vulnerability WatchGuard Dimension Database Server Test configuration allows an authenticated privileged attacker to…
CVE-2026-784992026-08-28A server-side request forgery (SSRF) vulnerability WatchGuard Dimension FTP Server Test configuration allows an authenticated privileged attacker to enumerate…
CVE-2026-784982026-08-28A server-side request forgery (SSRF) vulnerability WatchGuard Dimension Email Server Test configuration allows an authenticated privileged attacker to enumerat…
CVE-2026-784952026-08-28A server-side request forgery (SSRF) vulnerability WatchGuard Dimension Remote Backup Connection Test configuration allows an authenticated privileged attacker…
CVE-2026-781742026-08-28WatchGuard Dimension records unredacted session identifiers for logged-in users in its web UI diagnostic log. A low-privileged Dimension Administrator can retr…
CVE-2026-781032026-08-28WatchGuard Dimension provides a client-side lock/unlock UI control for management changes. The server-side configuration endpoint does not enforce this lock/un…
CVE-2026-780472026-08-28A stored cross-site scripting (XSS) vulnerability in WatchGuard Dimension's task scheduling feature allows a low-privileged authenticated administrator to inje…
CVE-2026-780112026-08-28An integer underflow vulnerability in the WatchGuard Fireware OS iked process allows a remote unauthenticated attacker to create a Denial of Service (DoS) cond…
CVE-2026-780102026-08-28A stack-based buffer overflow vulnerability in the WatchGuard Fireware OS iked process iallows a remote unauthenticated attacker to create a Denial of Service…
CVE-2026-780092026-08-28An out-of-bounds read vulnerability in the WatchGuard Fireware OS iked process allows a remote unauthenticated attacker to create a Denial of Service (DoS) con…
CVE-2026-780082026-08-28A buffer overflow vulnerability in the WatchGuard Fireware OS Management Web UI allows an authenticated administrator with network access to cause a denial of…
CVE-2026-193182026-08-28A stack-based buffer overflow vulnerability in the WatchGuard Fireware OS iked process allows a remote unauthenticated attacker to execute arbitrary code by se…
CVE-2026-193172026-08-28An out-of-bounds read vulnerability in the WatchGuard Fireware OS iked process allows a remote unauthenticated attacker to create a Denial of Service (DoS) con…
CVE-2026-193162026-08-28A double-free vulnerability in the WatchGuard Fireware OS iked process allows a remote unauthenticated attacker to create a Denial of Service (DoS) condition i…
CVE-2026-193152026-08-28A type confusion vulnerability in the iked process of WatchGuard Fireware OS allows a remote unauthenticated attacker to execute arbitrary code by sending spec…
CVE-2026-193142026-08-28An integer underflow vulnerability in the WatchGuard Fireware OS iked process allows a remote unauthenticated attacker to create a Denial of Service (DoS) cond…
CVE-2026-193132026-08-28An heap overflow vulnerability in the WatchGuard Fireware OS iked process allows a remote unauthenticated attacker to execute arbitrary code by sending special…
CVE-2026-131082026-08-28WatchGuard Dimension is susceptible to a denial-of-service condition when an attacker sends a high volume of TCP SYN packets to the log listening service.
CVE-2026-130862026-08-28A stack-based buffer overflow in the epm (Endpoint Protection Manager) service used by the deprecated Mobile Security feature in WatchGuard Fireware OS allows…
CVE-2026-818512026-08-28A heap-based buffer overflow vulnerability in Fireware OS's iked process allows an authenticated administrator to crash the IKE daemon (iked), resulting in a d…
CVE-2026-579102026-08-25Improper authentication in the WatchGuard Agent allows an unauthenticated attacker with network access to cause the agent to execute arbitrary code with elevat…
CVE-2026-579092026-08-25A path traversal vulnerability in WatchGuard Agent allows a remote, unauthenticated attacker on an adjacent network to execute arbitrary code on an affected sy…
CVE-2026-8247High8.82026-07-03An Out-of-bounds Write vulnerability in WatchGuard Fireware OS may allow an unauthenticated attacker on the same local network segment to execute arbitrary cod…
CVE-2026-13728Medium4.42026-07-03In exception circumstances, WatchGuard Fireware OS on a FireCluster may use a hard-coded encryption key to encrypt saved credentials for Access Portal resource…
CVE-2026-13722High7.22026-07-03WatchGuard Fireware OS contains a firmware validation bypass when processing a backup image via the backup/restore feature. An authenticated administrator can…
CVE-2026-13384High7.22026-07-03An Out-of-bounds Write vulnerability in WatchGuard Fireware OS wgagent process could allow an authenticated privileged user to execute arbitrary code via a spe…
CVE-2026-13383High7.22026-07-03An Out-of-bounds Write vulnerability in WatchGuard Fireware OS ikestubd process could allow an authenticated privileged user to execute arbitrary code via a sp…
CVE-2026-13377Medium4.82026-07-03Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in WatchGuard Fireware OS SIP Proxy module allows Sto…
CVE-2026-13376Medium4.82026-07-03Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in WatchGuard Fireware OS spamBlocker module allows S…
CVE-2026-13375Medium4.82026-07-03Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in WatchGuard Fireware OS (Autotask Technology Integr…
CVE-2026-13374Medium4.82026-07-03Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in WatchGuard Fireware OS (ConnectWise Technology Int…
CVE-2026-13373Medium4.82026-07-03Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in WatchGuard Fireware OS (Tigerpaw Technology Integr…
CVE-2026-13371Medium4.92026-07-03An authenticated administrator can trigger a denial-of-service condition in the Fireware Management Web UI by sending malformed or crafted data to the put_data…
CVE-2026-13368High8.12026-07-03WatchGuard Fireware OS contains a race condition leading to a use-after-free vulnerability in LDAP authentication for the Mobile User VPN with IKEv2. A remote…
CVE-2026-13084High7.52026-07-03A null pointer dereference vulnerability in WatchGuard Fireware OS may allow a remote unauthenticated attacker to create a denial-of-service (DoS) condition by…
CVE-2026-13079High7.82026-07-03A local privilege escalation vulnerability in the WatchGuard Mobile VPN with SSL client for Windows allows a local attacker to escalate their privileges to NT…
CVE-2026-13054High7.22026-07-03A path traversal vulnerability in the WatchGuard Fireware OS Management Web UI allows a privileged authenticated attacker to write arbitrary files on the Fireb…
CVE-2026-13053High7.22026-07-03An Out-of-bounds Write vulnerability in WatchGuard Fireware OS's CLI could allow an authenticated privileged user to execute arbitrary code via a specially cra…
CVE-2026-13050High7.22026-07-03An Out-of-bounds Write vulnerability in WatchGuard Fireware OS networkd process could allow an authenticated privileged user to execute arbitrary code via a sp…
CVE-2026-6788High7.82026-05-06Uncontrolled Search Path Element vulnerability in WatchGuard Agent on Windows allows Using Malicious Files.
CVE-2026-6787High7.82026-05-06Use of Hard-coded Cryptographic Key vulnerability in WatchGuard Agent on Windows allows Inclusion of Code in Existing Process.
CVE-2026-41288High7.82026-05-06Incorrect permission assignment for a resource in the patch management component of the WatchGuard Agent on Windows allows an authenticated local user to eleva…
CVE-2026-41286Medium6.52026-05-06Stack-based Buffer Overflow vulnerability in the WatchGuard Agent discovery service on Windows allows Overflow Buffers. An unauthenticated attacker on the same…
CVE-2026-41287Medium6.52026-05-06Stack-based Buffer Overflow vulnerability in the WatchGuard Agent discovery service on Windows allows Overflow Buffers. An unauthenticated attacker on the same…
CVE-2026-3987High7.22026-04-01A path traversal vulnerability in the Fireware OS Web UI on WatchGuard Firebox systems may allow a privileged authenticated remote attacker to execute arbitrar…
CVE-2026-4315Medium6.52026-03-30A Cross-Site Request Forgery (CSRF) vulnerability in the WatchGuard Fireware OS WebUI could allow a remote attacker to trigger a denial-of-service (DoS) condit…
CVE-2026-4266Medium6.72026-03-30An Insecure Deserialization vulnerability in WatchGuard Fireware OS allows an attacker that has obtained write access to the local filesystem through another v…
CVE-2026-3344Medium4.92026-03-03A vulnerability in WatchGuard Fireware OS may allow an attacker to bypass the Fireware OS filesystem integrity check and maintain limited persistence via a mal…
CVE-2026-3343Medium6.12026-03-03A reflected cross-site scripting (XSS) vulnerability in the Fireware OS Web UI enabled execution of malicious JavaScript in the context of an authenticated man…
CVE-2026-3342High7.22026-03-03An Out-of-bounds Write vulnerability in WatchGuard Fireware OS may allow an authenticated privileged administrator to execute arbitrary code with root permissi…
CVE-2026-14982026-01-30An LDAP Injection vulnerability in WatchGuard Fireware OS may allow a remote unauthenticated attacker to retrieve sensitive information from a connected LDAP a…
CVE-2025-14733Critical9.82025-12-19An Out-of-bounds Write vulnerability in the WatchGuard Fireware OS iked process may allow a remote unauthenticated attacker to execute arbitrary code. This vul…
CVE-2025-6946Medium4.82025-12-04A stored cross-site scripting (XSS) vulnerability exists in the management interface of WatchGuard Firebox appliances via the IPS configuration. An authenticat…
CVE-2025-19102025-12-04The WatchGuard Mobile VPN with SSL Client on Windows allows a locally authenticated non-administrative Windows user to escalate their privileges to NT AUTHORIT…
CVE-2025-1547High7.22025-12-04A stack-based buffer overflow vulnerability [CWE-121] in WatchGuard Fireware OS's certificate request command could allow an authenticated privileged user to e…
CVE-2025-1545High7.52025-12-04An XPath Injection vulnerability in WatchGuard Fireware OS may allow a remote unauthenticated attacker to retrieve sensitive information from the Firebox confi…
CVE-2025-13940Medium5.52025-12-04An Expected Behavior Violation [CWE-440] vulnerability in WatchGuard Fireware OS may allow an attacker to bypass the Fireware OS boot time system integrity che…
CVE-2025-13939Medium6.12025-12-04Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in WatchGuard Fireware OS (Gateway Wireless Controlle…
CVE-2025-13938Medium6.12025-12-04Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in WatchGuard Fireware OS (Autotask Technology Integr…
CVE-2025-13937Medium6.12025-12-04Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in WatchGuard Fireware OS (ConnectWise Technology Int…
CVE-2025-13936Medium6.12025-12-04Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in WatchGuard Fireware OS (Tigerpaw Technology Integr…
CVE-2025-12196High7.22025-12-04An Out-of-bounds Write vulnerability in WatchGuard Fireware OS's CLI could allow an authenticated privileged user to execute arbitrary code via a specially cra…
CVE-2025-12195High7.22025-12-04An Out-of-bounds Write vulnerability in WatchGuard Fireware OS's CLI could allow an authenticated privileged user to execute arbitrary code via specially craft…
CVE-2025-12026High7.22025-12-04An Out-of-bounds Write vulnerability in WatchGuard Fireware OS’s certificate request command could allow an authenticated privileged user to execute arbitrary…
CVE-2025-11838High7.52025-12-04A memory corruption vulnerability in WatchGuard Fireware OS may allow an unauthenticated attacker to trigger a Denial of Service (DoS) condition in the Mobile…
CVE-2025-15492025-10-29A local privilege escalation vulnerability in the WatchGuard Mobile VPN with SSL client on Windows enables a local user to execute arbitrary commands with elev…
CVE-2025-41062025-10-24An authenticated admin user with access to both the management WebUI and command line interface on a Firebox can enable a diagnostic debug shell by uploading a…
CVE-2025-9242Critical9.82025-09-17An Out-of-bounds Write vulnerability in the WatchGuard Fireware OS iked process may allow a remote unauthenticated attacker to execute arbitrary code. This vul…
CVE-2025-69992025-09-15An HTTP Request Smuggling [CWE-444] vulnerability in the Authentication portal of WatchGuard Fireware OS allows a remote attacker to evade request parameter sa…
CVE-2025-69472025-09-15A stored cross-site scripting (XSS) vulnerability exists in the management interface of WatchGuard Firebox appliances via the SIP Proxy configuration. An authe…
CVE-2025-48052025-05-16A stored cross-site scripting (XSS) vulnerability exists in the management interface of WatchGuard Firebox appliances via the Access Portal configuration. An a…
CVE-2025-48042025-05-16Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in WatchGuard Fireware OS allows Stored XSS via the s…
CVE-2025-27822025-03-28The WatchGuard Terminal Services Agent on Windows does not properly configure directory permissions when installed in a non-default directory. This could allow…
CVE-2025-27812025-03-28The WatchGuard Mobile VPN with SSL Client on Windows does not properly configure directory permissions when installed in a non-default directory. This could al…
CVE-2025-12392025-02-14A stored cross-site scripting (XSS) vulnerability exists in the management interface of WatchGuard Firebox appliances via the Blocked Sites list. An authentica…
CVE-2025-1071Medium4.82025-02-14A stored cross-site scripting (XSS) vulnerability exists in the management interface of WatchGuard Firebox appliances via the spamBlocker module. An authentica…
CVE-2025-0178Medium6.12025-02-14An Improper Input Validation vulnerability in WatchGuard Fireware OS allows an attacker with network access to manipulate the value of the HTTP Host header in…
CVE-2022-31749Medium6.52025-01-28An argument injection vulnerability in the diagnose and import pac commands in WatchGuard Fireware OS before 12.8.1, 12.1.4, and 12.5.10 allows an authenticate…
CVE-2024-13043High7.82024-12-30Panda Security Dome Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected insta…
CVE-2024-8424High7.82024-11-08Improper Privilege Management vulnerability in WatchGuard EPDR, Panda AD360 and Panda Dome on Windows (PSANHost.exe module) allows arbitrary file delete with S…
CVE-2024-6594High7.52024-09-25Improper Handling of Exceptional Conditions vulnerability in the WatchGuard Single Sign-On Client on Windows causes the client to crash while handling malforme…
CVE-2024-6593Critical9.12024-09-25Incorrect Authorization vulnerability in WatchGuard Authentication Gateway (aka Single Sign-On Agent) on Windows allows an attacker with network access to exec…
CVE-2024-6592Critical9.12024-09-25An incorrect authorization vulnerability in the protocol communication between the WatchGuard Authentication Gateway (aka Single Sign-On Agent) on Windows and…
CVE-2024-5974High7.22024-07-09A buffer overflow in WatchGuard Fireware OS could may allow an authenticated remote attacker with privileged management access to execute arbitrary code with s…
CVE-2024-4944High7.82024-07-09A local privilege escalation vlnerability in the WatchGuard Mobile VPN with SSL client on Windows enables a local user to execute arbitrary commands with eleva…
CVE-2024-1417High7.82024-05-16Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in WatchGuard AuthPoint Password Manager on MacOS allows an a…
CVE-2024-3661High7.62024-05-06DHCP can add routes to a client’s routing table via the classless static route option (121). VPN-based security solutions that rely on routes to redirect traff…
CVE-2023-26239Medium5.52023-10-05An issue was discovered in WatchGuard EPDR 8.0.21.0002. Due to a weak implementation of a password check, it is possible to obtain credentials to access the ma…