Watchguard

87 CVEs across 129 Watchguard products. Browse Watchguard vulnerabilities, severities, and proof-of-concept exploits.

Watchguard products with known CVEs

ProductCVEs
Fireware61
Fireware Os48
Firebox M27041
Firebox M29041
Firebox M37041
Firebox M39041
Firebox M44041
Firebox M47041
Firebox M480041
Firebox M57041
Firebox M580041
Firebox M59041
Firebox M67041
Firebox M69041
Firebox T2041
Firebox T4041
Firebox T5541
Firebox T7041
Firebox T8041
Fireboxv41
Firebox M460039
Firebox M560039
Firebox Nv539
Firebox T2539
Firebox T4539
Firebox T8539
Firebox T115-W35
Firebox T12535
Firebox T125-W35
Firebox T14535
Firebox T145-W35
Firebox T1535
Firebox T18535
Firebox T3535
Fireboxcloud32
Firebox M29525
Firebox M39525
Firebox M49525
Firebox M59525
Firebox M69525
Firebox Cloud9
Soho Firewall8
Agent5
Epdr5
Mobile Vpn With Ssl Client5
Watchguard Agent5
Ap1004
Ap100 Firmware4
Ap1024
Ap102 Firmware4
Watchguard CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-8247High8.82026-07-03An Out-of-bounds Write vulnerability in WatchGuard Fireware OS may allow an unauthenticated attacker on the same local network segment to execute arbitrary cod…
CVE-2026-13728Medium4.42026-07-03In exception circumstances, WatchGuard Fireware OS on a FireCluster may use a hard-coded encryption key to encrypt saved credentials for Access Portal resource…
CVE-2026-13722High7.22026-07-03WatchGuard Fireware OS contains a firmware validation bypass when processing a backup image via the backup/restore feature. An authenticated administrator can…
CVE-2026-13384High7.22026-07-03An Out-of-bounds Write vulnerability in WatchGuard Fireware OS wgagent process could allow an authenticated privileged user to execute arbitrary code via a spe…
CVE-2026-13383High7.22026-07-03An Out-of-bounds Write vulnerability in WatchGuard Fireware OS ikestubd process could allow an authenticated privileged user to execute arbitrary code via a sp…
CVE-2026-13377Medium4.82026-07-03Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in WatchGuard Fireware OS SIP Proxy module allows Sto…
CVE-2026-13376Medium4.82026-07-03Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in WatchGuard Fireware OS spamBlocker module allows S…
CVE-2026-13375Medium4.82026-07-03Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in WatchGuard Fireware OS (Autotask Technology Integr…
CVE-2026-13374Medium4.82026-07-03Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in WatchGuard Fireware OS (ConnectWise Technology Int…
CVE-2026-13373Medium4.82026-07-03Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in WatchGuard Fireware OS (Tigerpaw Technology Integr…
CVE-2026-13371Medium4.92026-07-03An authenticated administrator can trigger a denial-of-service condition in the Fireware Management Web UI by sending malformed or crafted data to the put_data…
CVE-2026-13368High8.12026-07-03WatchGuard Fireware OS contains a race condition leading to a use-after-free vulnerability in LDAP authentication for the Mobile User VPN with IKEv2. A remote…
CVE-2026-13084High7.52026-07-03A null pointer dereference vulnerability in WatchGuard Fireware OS may allow a remote unauthenticated attacker to create a denial-of-service (DoS) condition by…
CVE-2026-13079High7.82026-07-03A local privilege escalation vulnerability in the WatchGuard Mobile VPN with SSL client for Windows allows a local attacker to escalate their privileges to NT…
CVE-2026-13054High7.22026-07-03A path traversal vulnerability in the WatchGuard Fireware OS Management Web UI allows a privileged authenticated attacker to write arbitrary files on the Fireb…
CVE-2026-13053High7.22026-07-03An Out-of-bounds Write vulnerability in WatchGuard Fireware OS's CLI could allow an authenticated privileged user to execute arbitrary code via a specially cra…
CVE-2026-13050High7.22026-07-03An Out-of-bounds Write vulnerability in WatchGuard Fireware OS networkd process could allow an authenticated privileged user to execute arbitrary code via a sp…
CVE-2026-6788High7.82026-05-06Uncontrolled Search Path Element vulnerability in WatchGuard Agent on Windows allows Using Malicious Files.
CVE-2026-6787High7.82026-05-06Use of Hard-coded Cryptographic Key vulnerability in WatchGuard Agent on Windows allows Inclusion of Code in Existing Process.
CVE-2026-41288High7.82026-05-06Incorrect permission assignment for a resource in the patch management component of the WatchGuard Agent on Windows allows an authenticated local user to eleva…
CVE-2026-41286Medium6.52026-05-06Stack-based Buffer Overflow vulnerability in the WatchGuard Agent discovery service on Windows allows Overflow Buffers. An unauthenticated attacker on the same…
CVE-2026-41287Medium6.52026-05-06Stack-based Buffer Overflow vulnerability in the WatchGuard Agent discovery service on Windows allows Overflow Buffers. An unauthenticated attacker on the same…
CVE-2026-3987High7.22026-04-01A path traversal vulnerability in the Fireware OS Web UI on WatchGuard Firebox systems may allow a privileged authenticated remote attacker to execute arbitrar…
CVE-2026-4315Medium6.52026-03-30A Cross-Site Request Forgery (CSRF) vulnerability in the WatchGuard Fireware OS WebUI could allow a remote attacker to trigger a denial-of-service (DoS) condit…
CVE-2026-4266Medium6.72026-03-30An Insecure Deserialization vulnerability in WatchGuard Fireware OS allows an attacker that has obtained write access to the local filesystem through another v…
CVE-2026-3344Medium4.92026-03-03A vulnerability in WatchGuard Fireware OS may allow an attacker to bypass the Fireware OS filesystem integrity check and maintain limited persistence via a mal…
CVE-2026-3343Medium6.12026-03-03A reflected cross-site scripting (XSS) vulnerability in the Fireware OS Web UI enabled execution of malicious JavaScript in the context of an authenticated man…
CVE-2026-3342High7.22026-03-03An Out-of-bounds Write vulnerability in WatchGuard Fireware OS may allow an authenticated privileged administrator to execute arbitrary code with root permissi…
CVE-2026-14982026-01-30An LDAP Injection vulnerability in WatchGuard Fireware OS may allow a remote unauthenticated attacker to retrieve sensitive information from a connected LDAP a…
CVE-2025-14733Critical9.82025-12-19An Out-of-bounds Write vulnerability in the WatchGuard Fireware OS iked process may allow a remote unauthenticated attacker to execute arbitrary code. This vul…
CVE-2025-6946Medium4.82025-12-04A stored cross-site scripting (XSS) vulnerability exists in the management interface of WatchGuard Firebox appliances via the IPS configuration. An authenticat…
CVE-2025-19102025-12-04The WatchGuard Mobile VPN with SSL Client on Windows allows a locally authenticated non-administrative Windows user to escalate their privileges to NT AUTHORIT…
CVE-2025-1547High7.22025-12-04A stack-based buffer overflow vulnerability [CWE-121] in WatchGuard Fireware OS's certificate request command could allow an authenticated privileged user to e…
CVE-2025-1545High7.52025-12-04An XPath Injection vulnerability in WatchGuard Fireware OS may allow a remote unauthenticated attacker to retrieve sensitive information from the Firebox confi…
CVE-2025-13940Medium5.52025-12-04An Expected Behavior Violation [CWE-440] vulnerability in WatchGuard Fireware OS may allow an attacker to bypass the Fireware OS boot time system integrity che…
CVE-2025-13939Medium6.12025-12-04Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in WatchGuard Fireware OS (Gateway Wireless Controlle…
CVE-2025-13938Medium6.12025-12-04Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in WatchGuard Fireware OS (Autotask Technology Integr…
CVE-2025-13937Medium6.12025-12-04Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in WatchGuard Fireware OS (ConnectWise Technology Int…
CVE-2025-13936Medium6.12025-12-04Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in WatchGuard Fireware OS (Tigerpaw Technology Integr…
CVE-2025-12196High7.22025-12-04An Out-of-bounds Write vulnerability in WatchGuard Fireware OS's CLI could allow an authenticated privileged user to execute arbitrary code via a specially cra…
CVE-2025-12195High7.22025-12-04An Out-of-bounds Write vulnerability in WatchGuard Fireware OS's CLI could allow an authenticated privileged user to execute arbitrary code via specially craft…
CVE-2025-12026High7.22025-12-04An Out-of-bounds Write vulnerability in WatchGuard Fireware OS’s certificate request command could allow an authenticated privileged user to execute arbitrary…
CVE-2025-11838High7.52025-12-04A memory corruption vulnerability in WatchGuard Fireware OS may allow an unauthenticated attacker to trigger a Denial of Service (DoS) condition in the Mobile…
CVE-2025-15492025-10-29A local privilege escalation vulnerability in the WatchGuard Mobile VPN with SSL client on Windows enables a local user to execute arbitrary commands with elev…
CVE-2025-41062025-10-24An authenticated admin user with access to both the management WebUI and command line interface on a Firebox can enable a diagnostic debug shell by uploading a…
CVE-2025-9242Critical9.82025-09-17An Out-of-bounds Write vulnerability in the WatchGuard Fireware OS iked process may allow a remote unauthenticated attacker to execute arbitrary code. This vul…
CVE-2025-69992025-09-15An HTTP Request Smuggling [CWE-444] vulnerability in the Authentication portal of WatchGuard Fireware OS allows a remote attacker to evade request parameter sa…
CVE-2025-69472025-09-15A stored cross-site scripting (XSS) vulnerability exists in the management interface of WatchGuard Firebox appliances via the SIP Proxy configuration. An authe…
CVE-2025-48052025-05-16A stored cross-site scripting (XSS) vulnerability exists in the management interface of WatchGuard Firebox appliances via the Access Portal configuration. An a…
CVE-2025-48042025-05-16Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in WatchGuard Fireware OS allows Stored XSS via the s…
CVE-2025-27822025-03-28The WatchGuard Terminal Services Agent on Windows does not properly configure directory permissions when installed in a non-default directory. This could allow…
CVE-2025-27812025-03-28The WatchGuard Mobile VPN with SSL Client on Windows does not properly configure directory permissions when installed in a non-default directory. This could al…
CVE-2025-12392025-02-14A stored cross-site scripting (XSS) vulnerability exists in the management interface of WatchGuard Firebox appliances via the Blocked Sites list. An authentica…
CVE-2025-1071Medium4.82025-02-14A stored cross-site scripting (XSS) vulnerability exists in the management interface of WatchGuard Firebox appliances via the spamBlocker module. An authentica…
CVE-2025-0178Medium6.12025-02-14An Improper Input Validation vulnerability in WatchGuard Fireware OS allows an attacker with network access to manipulate the value of the HTTP Host header in…
CVE-2022-31749Medium6.52025-01-28An argument injection vulnerability in the diagnose and import pac commands in WatchGuard Fireware OS before 12.8.1, 12.1.4, and 12.5.10 allows an authenticate…
CVE-2024-13043High7.82024-12-30Panda Security Dome Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected insta…
CVE-2024-8424High7.82024-11-08Improper Privilege Management vulnerability in WatchGuard EPDR, Panda AD360 and Panda Dome on Windows (PSANHost.exe module) allows arbitrary file delete with S…
CVE-2024-6594High7.52024-09-25Improper Handling of Exceptional Conditions vulnerability in the WatchGuard Single Sign-On Client on Windows causes the client to crash while handling malforme…
CVE-2024-6593Critical9.12024-09-25Incorrect Authorization vulnerability in WatchGuard Authentication Gateway (aka Single Sign-On Agent) on Windows allows an attacker with network access to exec…
CVE-2024-6592Critical9.12024-09-25An incorrect authorization vulnerability in the protocol communication between the WatchGuard Authentication Gateway (aka Single Sign-On Agent) on Windows and…
CVE-2024-5974High7.22024-07-09A buffer overflow in WatchGuard Fireware OS could may allow an authenticated remote attacker with privileged management access to execute arbitrary code with s…
CVE-2024-4944High7.82024-07-09A local privilege escalation vlnerability in the WatchGuard Mobile VPN with SSL client on Windows enables a local user to execute arbitrary commands with eleva…
CVE-2024-1417High7.82024-05-16Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in WatchGuard AuthPoint Password Manager on MacOS allows an a…
CVE-2024-3661High7.62024-05-06DHCP can add routes to a client’s routing table via the classless static route option (121). VPN-based security solutions that rely on routes to redirect traff…
CVE-2023-26239Medium5.52023-10-05An issue was discovered in WatchGuard EPDR 8.0.21.0002. Due to a weak implementation of a password check, it is possible to obtain credentials to access the ma…
CVE-2023-26238Medium5.52023-10-05An issue was discovered in WatchGuard EPDR 8.0.21.0002. It is possible to enable or disable defensive capabilities by sending a crafted message to a named pipe.
CVE-2023-26237Medium6.72023-10-05An issue was discovered in WatchGuard EPDR 8.0.21.0002. It is possible to bypass the defensive capabilities by adding a registry key as SYSTEM.
CVE-2023-26236High7.82023-10-05An issue was discovered in WatchGuard EPDR 8.0.21.0002. Due to a weak implementation of message handling between WatchGuard EPDR processes, it is possible to p…
CVE-2023-37849Medium6.52023-07-13A DLL hijacking vulnerability in Panda Security VPN for Windows prior to version v15.14.8 allows attackers to execute arbitrary code via placing a crafted DLL…
CVE-2022-31792Medium5.42022-09-06A stored cross-site scripting (XSS) vulnerability exists in the management web interface of WatchGuard Firebox and XTM appliances. A remote attacker can potent…
CVE-2022-31791High7.82022-09-06WatchGuard Firebox and XTM appliances allow a local attacker (that has already obtained shell access) to elevate their privileges and execute code with root pe…
CVE-2022-31789Critical9.82022-09-06An integer overflow in WatchGuard Firebox and XTM appliances allows an unauthenticated remote attacker to trigger a buffer overflow and potentially execute arb…
CVE-2022-31790High7.52022-09-06WatchGuard Firebox and XTM appliances allow an unauthenticated remote attacker to retrieve sensitive authentication server settings by sending a malicious requ…
CVE-2022-25361Critical9.12022-06-07WatchGuard Firebox and XTM appliances allow an unauthenticated remote attacker to delete arbitrary files from a limited set of directories on the system. This…
CVE-2022-26318Critical9.82022-03-04On WatchGuard Firebox and XTM appliances, an unauthenticated user can execute arbitrary code, aka FBX-22786. This vulnerability impacts Fireware OS before 12.7…
CVE-2022-25363Medium6.52022-02-24WatchGuard Firebox and XTM appliances allow an authenticated remote attacker with unprivileged credentials to modify privileged management user credentials. Th…
CVE-2022-25360High8.82022-02-24WatchGuard Firebox and XTM appliances allow an authenticated remote attacker with unprivileged credentials to upload files to arbitrary locations. This vulnera…
CVE-2022-25293High8.82022-02-24A systemd stack-based buffer overflow in WatchGuard Firebox and XTM appliances allows an authenticated remote attacker to potentially execute arbitrary code by…
CVE-2022-25292High8.82022-02-24A wgagent stack-based buffer overflow in WatchGuard Firebox and XTM appliances allows an authenticated remote attacker to potentially execute arbitrary code by…
CVE-2022-25291High8.82022-02-24An integer overflow in WatchGuard Firebox and XTM appliances allows an authenticated remote attacker to trigger a heap-based buffer overflow and potentially ex…
CVE-2022-25290Medium6.52022-02-24WatchGuard Firebox and XTM appliances allow an authenticated remote attacker with unprivileged credentials to retrieve certificate private keys. This vulnerabi…
CVE-2022-23176High8.82022-02-24WatchGuard Firebox and XTM appliances allow a remote attacker with unprivileged credentials to access the system with a privileged management session via expos…
CVE-2021-34998High7.82022-01-13This vulnerability allows local attackers to escalate privileges on affected installations of Panda Security Free Antivirus 20.2.0.0. An attacker must first ob…
CVE-2020-10532High7.52020-03-12The AD Helper component in WatchGuard Fireware before 5.8.5.10317 allows remote attackers to discover cleartext passwords via the /domains/list URI.
CVE-2014-6413Medium6.12020-02-07A Cross-site Scripting (XSS) vulnerability exists in WatchGuard XTM 11.8.3 via the poll_name parameter in the firewall/policy script.
CVE-2019-18652Medium6.12020-01-07A DOM based XSS vulnerability has been identified on the WatchGuard XMT515 through 12.1.3, allowing a remote attacker to execute JavaScript in the victim's bro…
CVE-2016-6154Medium6.12019-08-23The authentication applet in Watchguard Fireware 11.11 Operating System has reflected XSS (this can also cause an open redirect).
CVE-2018-10578Critical9.82018-05-02An issue was discovered on WatchGuard AP100, AP102, and AP200 devices with firmware before 1.2.9.15, and AP300 devices with firmware before 2.0.0.10. Incorrect…
CVE-2018-10577High8.82018-05-02An issue was discovered on WatchGuard AP100, AP102, and AP200 devices with firmware before 1.2.9.15, and AP300 devices with firmware before 2.0.0.10. File uplo…
CVE-2018-10576High7.82018-04-30An issue was discovered on WatchGuard AP100, AP102, and AP200 devices with firmware before 1.2.9.15. Improper authentication handling by the native Access Poin…
CVE-2018-10575Critical9.82018-04-30An issue was discovered on WatchGuard AP100, AP102, and AP200 devices with firmware before 1.2.9.15. Hardcoded credentials exist for an unprivileged SSH accoun…
CVE-2015-2878High8.82017-10-23Multiple cross-site request forgery (CSRF) vulnerabilities in Hexis HawkEye G 3.0.1.4912 allow remote attackers to hijack the authentication of administrators…
CVE-2017-14616High7.52017-09-20An FBX-5312 issue was discovered in WatchGuard Fireware before 12.0. If a login attempt is made in the XML-RPC interface with an XML message containing an empt…
CVE-2017-14615Medium6.12017-09-20An FBX-5313 issue was discovered in WatchGuard Fireware before 12.0. When a failed login attempt is made to the login endpoint of the XML-RPC interface, if Jav…
CVE-2017-8060Medium5.92017-05-05Acceptance of invalid/self-signed TLS certificates in "Panda Mobile Security" 1.1 for iOS allows a man-in-the-middle and/or physically proximate attacker to si…
CVE-2017-8339Medium5.52017-04-30PSKMAD.sys in Panda Free Antivirus 18.0 allows local users to cause a denial of service (BSoD) via a crafted DeviceIoControl request to \\.\PSMEMDriver.
CVE-2017-8056Medium5.32017-04-22WatchGuard Fireware v11.12.1 and earlier mishandles requests referring to an XML External Entity (XXE), in the XML-RPC agent. This causes the Firebox wgagent p…
CVE-2017-8055Medium5.32017-04-22WatchGuard Fireware allows user enumeration, e.g., in the Firebox XML-RPC login handler. A login request that contains a blank password sent to the XML-RPC age…
CVE-2016-7089High7.82016-08-24WatchGuard RapidStream appliances allow local users to gain privileges and execute arbitrary commands via a crafted ifconfig command, aka ESCALATEPLOWMAN.