WatchGuard vulnerabilities
139 CVEs and advisories name WatchGuard as an affected vendor, 2 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-57907WatchGuard Endpoint Protection Local Privilege Escalation in Console-Service Communication Allows SYSTEM Code Execution
- CVE-2026-121637WatchGuard AuthPoint Gateway Improper HMAC Validation in LDAP Authentication Callback Allows Forged Authentication Results
- CVE-2026-121639WatchGuard AuthPoint Gateway Improper Authentication Allows Unauthenticated Denial of Service
- CVE-2026-121638WatchGuard AuthPoint Gateway Improper Certificate Validation Allows Man-in-the-Middle Attacks
- CVE-2026-121640WatchGuard AuthPoint Gateway Capture-replay Allows Unauthorized Administrative Actions
- CVE-2026-115495Mobile VPN with SSL Client for Windows: Cleartext Transmission of VPN Credentials over Local Management Socket
- CVE-2026-90465Fireware OS Missing Authentication in FireCluster Sync Allows Privilege Escalation
- CVE-2026-93862Fireware OS Out-of-Bounds Read in FireCluster Sync Allows Denial of Service
- CVE-2026-112709Fireware OS Heap Buffer Overflow in AD Authentication Service Allows Pre-Authentication Remote Code Execution
- CVE-2026-90464Fireware OS Missing Command Validation allows Authenticated Arbitrary File Modification as Root
- CVE-2026-103593Fireware OS Stack Buffer Overflow in Logging Service Allows Remote Code Execution
- CVE-2026-113881Fireware OS Stack Buffer Overflow in VPN Network Access Enforcement Allows Unprivileged Code Execution
- CVE-2026-93434Fireware OS XPath Injection in SSH Authentication Allows Blind Extraction of Configuration Secrets
- CVE-2026-90442Fireware OS Authenticated Stack Buffer Overflow in certd Allows Denial of Service
- CVE-2026-112710Fireware OS Heap Buffer Overflow in AD Authentication Service Allows Pre-Authentication Remote Code Execution
- CVE-2026-82332Fireware OS Improper Authentication in AuthPoint MFA Verification Allows Session Hijacking
- CVE-2026-93857Fireware OS Pre-Authentication Stack Buffer Overflow in SIP Proxy Allows Remote Code Execution
- CVE-2026-93866Fireware OS Pre-Authentication Integer Overflow in Access Portal Allows Out-of-Bounds Write
- CVE-2026-93864Fireware OS Link Following in firewalld Allows Local Arbitrary File Overwrite as Root
- CVE-2026-103594Fireware OS Stack Buffer Overflow in WireGuard Configuration Allows Remote Code Execution
- CVE-2026-104381Fireware OS Missing Authentication in FireCluster State Sync Allows BOVPN Tunnel Denial of Service
- CVE-2026-111107Fireware OS NULL Pointer Dereference in Management Interface Allows Unauthenticated Denial of Service
- CVE-2026-93865Fireware OS Missing Authentication in FireCluster Sync Daemon Allows Remote Root Action Injection
- CVE-2026-115253WatchGuard Agent Incorrect Permission Assignment in Log Directory Allows Local Log Tampering
- CVE-2026-96293Endpoint Security Cleartext Storage of FileVault Recovery Key in Log File
- CVE-2026-13043WatchGuard Endpoint Security Missing Authentication in Kernel Memory Access Driver Allows Arbitrary Kernel Memory Access
- CVE-2026-86134Fireware OS Pre-Authentication NULL Pointer Dereference Allows Remote Denial of Service
- CVE-2026-86104Fireware OS Resource Exhaustion in Login Process Allows Denial of Service
- CVE-2026-18145Fireware OS Stack-based Buffer Overflow in spamd Allows Remote Code Execution
- CVE-2026-86101Fireware OS Authorization Bypass in SAML Login Allows Unauthorized SSLVPN Access