watchguard Vulnerability Advisory Catalog

Total 103 security vulnerabilities recorded for watchguard software and firmware.

← Back to All Vendors
Component: fireware

In exception circumstances, WatchGuard Fireware OS on a FireCluster may use a hard-coded encryption key to encrypt saved credentials for Access Portal...

๐Ÿ“… 2026-07-03
CVSS 4.4 Dossier →
Component: fireware

An Out-of-bounds Write vulnerability in WatchGuard Fireware OS wgagent process could allow an authenticated privileged user to execute arbitrary code ...

๐Ÿ“… 2026-07-03
CVSS 7.2 Dossier →
Component: fireware

An Out-of-bounds Write vulnerability in WatchGuard Fireware OS ikestubd process could allow an authenticated privileged user to execute arbitrary code...

๐Ÿ“… 2026-07-03
CVSS 7.2 Dossier →
Component: fireware

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in WatchGuard Fireware OS SIP Proxy module a...

๐Ÿ“… 2026-07-03
CVSS 4.8 Dossier →
Component: fireware

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in WatchGuard Fireware OS spamBlocker module...

๐Ÿ“… 2026-07-03
CVSS 4.8 Dossier →
Component: fireware

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in WatchGuard Fireware OS (Autotask Technolo...

๐Ÿ“… 2026-07-03
CVSS 4.8 Dossier →
Component: fireware

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in WatchGuard Fireware OS (ConnectWise Techn...

๐Ÿ“… 2026-07-03
CVSS 4.8 Dossier →
Component: fireware

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in WatchGuard Fireware OS (Tigerpaw Technolo...

๐Ÿ“… 2026-07-03
CVSS 4.8 Dossier →
Component: mobile_vpn_with_ssl

A local privilege escalation vulnerability in the WatchGuard Mobile VPN with SSL client for Windows allows a local attacker to escalate their privileg...

๐Ÿ“… 2026-07-03
CVSS 7.8 Dossier →
Component: fireware

A path traversal vulnerability in the WatchGuard Fireware OS Management Web UI allows a privileged authenticated attacker to write arbitrary files on ...

๐Ÿ“… 2026-07-03
CVSS 7.2 Dossier →
Component: fireware

An Out-of-bounds Write vulnerability in WatchGuard Fireware OS's CLI could allow an authenticated privileged user to execute arbitrary code via a spec...

๐Ÿ“… 2026-07-03
CVSS 7.2 Dossier →
Component: agent

Uncontrolled Search Path Element vulnerabilityย in WatchGuard Agent on Windows allows Using Malicious Files.This issue affects WatchGuard Agentย before ...

๐Ÿ“… 2026-05-06
CVSS 7.8 Dossier →
Component: agent

Use of Hard-coded Cryptographic Key vulnerability in WatchGuard Agent on Windows allows Inclusion of Code in Existing Process.This issue affectsย Watch...

๐Ÿ“… 2026-05-06
CVSS 7.8 Dossier →
Component: agent

Incorrect permission assignment for a resource in the patch management component of the WatchGuard Agent on Windows allows an authenticated local user...

๐Ÿ“… 2026-05-06
CVSS 7.8 Dossier →
Component: agent

Stack-based Buffer Overflow vulnerability in the WatchGuard Agent discovery service on Windows allows Overflow Buffers. An unauthenticated attacker on...

๐Ÿ“… 2026-05-06
CVSS 6.5 Dossier →
Component: agent

Stack-based Buffer Overflow vulnerability in the WatchGuard Agent discovery service on Windows allows Overflow Buffers. An unauthenticated attacker on...

๐Ÿ“… 2026-05-06
CVSS 6.5 Dossier →
CVE-2026-3344 MEDIUM
Component: fireware

A vulnerability in WatchGuard Fireware OS may allow an attacker to bypass the Fireware OS filesystem integrity check and maintain limited persistence ...

๐Ÿ“… 2026-03-03
CVSS 4.9 Dossier →
CVE-2026-3343 MEDIUM
Component: fireware

A reflected cross-site scripting (XSS) vulnerability in the Fireware OS Web UI enabled execution of malicious JavaScript in the context of an authenti...

๐Ÿ“… 2026-03-03
CVSS 6.1 Dossier →
Component: fireware

An Out-of-bounds Write vulnerability in WatchGuard Fireware OS may allow an authenticated privileged administrator to execute arbitrary code with root...

๐Ÿ“… 2026-03-03
CVSS 7.2 Dossier →
CVE-2025-14733 CRITICAL
Component: fireware

An Out-of-bounds Write vulnerability in the WatchGuard Fireware OS iked process may allow a remote unauthenticated attacker to execute arbitrary code....

๐Ÿ“… 2025-12-19
CVSS 9.8 Dossier →
CVE-2025-6946 MEDIUM
Component: fireware

A stored cross-site scripting (XSS) vulnerability exists in the management interface of WatchGuard Firebox appliances via the IPS configuration. An au...

๐Ÿ“… 2025-12-04
CVSS 4.8 Dossier →
Component: fireware

A stack-based buffer overflow vulnerability [CWE-121] in WatchGuard Fireware OS's certificate request command could allow an authenticated privileged ...

๐Ÿ“… 2025-12-04
CVSS 7.2 Dossier →
Component: fireware

An XPath Injection vulnerability in WatchGuard Fireware OS may allow a remote unauthenticated attacker to retrieve sensitive information from the Fire...

๐Ÿ“… 2025-12-04
CVSS 7.5 Dossier →
Component: fireware

An Expected Behavior Violation [CWE-440] vulnerability in WatchGuard Fireware OS may allow an attacker to bypass the Fireware OS boot time system inte...

๐Ÿ“… 2025-12-04
CVSS 5.5 Dossier →
Page 1 of 5 (103 Total Records)