# cve.now: WatchGuard

The newest entries naming WatchGuard as an affected vendor (up to 200), of 139 in all, 2 known exploited. Older ones are in the full catalog at https://cve.now/latest.md.

- [CVE-2026-57907](https://cve.now/CVE-2026-57907.md): WatchGuard Endpoint Protection Local Privilege Escalation in Console-Service Communication Allows SYSTEM Code Execution (CVSS 8.5)
- [CVE-2026-121637](https://cve.now/CVE-2026-121637.md): WatchGuard AuthPoint Gateway Improper HMAC Validation in LDAP Authentication Callback Allows Forged Authentication Results (CVSS 8.9)
- [CVE-2026-121639](https://cve.now/CVE-2026-121639.md): WatchGuard AuthPoint Gateway Improper Authentication Allows Unauthenticated Denial of Service (CVSS 9.2)
- [CVE-2026-121638](https://cve.now/CVE-2026-121638.md): WatchGuard AuthPoint Gateway Improper Certificate Validation Allows Man-in-the-Middle Attacks (CVSS 9.1)
- [CVE-2026-121640](https://cve.now/CVE-2026-121640.md): WatchGuard AuthPoint Gateway Capture-replay Allows Unauthorized Administrative Actions (CVSS 9.1)
- [CVE-2026-115495](https://cve.now/CVE-2026-115495.md): Mobile VPN with SSL Client for Windows: Cleartext Transmission of VPN Credentials over Local Management Socket (CVSS 5.7)
- [CVE-2026-90465](https://cve.now/CVE-2026-90465.md): Fireware OS Missing Authentication in FireCluster Sync Allows Privilege Escalation (CVSS 8.7)
- [CVE-2026-93862](https://cve.now/CVE-2026-93862.md): Fireware OS Out-of-Bounds Read in FireCluster Sync Allows Denial of Service (CVSS 7.2)
- [CVE-2026-112709](https://cve.now/CVE-2026-112709.md): Fireware OS Heap Buffer Overflow in AD Authentication Service Allows Pre-Authentication Remote Code Execution (CVSS 9.2)
- [CVE-2026-90464](https://cve.now/CVE-2026-90464.md): Fireware OS Missing Command Validation allows Authenticated Arbitrary File Modification as Root (CVSS 7.2)
- [CVE-2026-103593](https://cve.now/CVE-2026-103593.md): Fireware OS Stack Buffer Overflow in Logging Service Allows Remote Code Execution (CVSS 9.1)
- [CVE-2026-113881](https://cve.now/CVE-2026-113881.md): Fireware OS Stack Buffer Overflow in VPN Network Access Enforcement Allows Unprivileged Code Execution (CVSS 6.1)
- [CVE-2026-93434](https://cve.now/CVE-2026-93434.md): Fireware OS XPath Injection in SSH Authentication Allows Blind Extraction of Configuration Secrets (CVSS 8.7)
- [CVE-2026-90442](https://cve.now/CVE-2026-90442.md): Fireware OS Authenticated Stack Buffer Overflow in certd Allows Denial of Service (CVSS 8.6)
- [CVE-2026-112710](https://cve.now/CVE-2026-112710.md): Fireware OS Heap Buffer Overflow in AD Authentication Service Allows Pre-Authentication Remote Code Execution (CVSS 9.2)
- [CVE-2026-82332](https://cve.now/CVE-2026-82332.md): Fireware OS Improper Authentication in AuthPoint MFA Verification Allows Session Hijacking (CVSS 5.6)
- [CVE-2026-93857](https://cve.now/CVE-2026-93857.md): Fireware OS Pre-Authentication Stack Buffer Overflow in SIP Proxy Allows Remote Code Execution (CVSS 9.2)
- [CVE-2026-93866](https://cve.now/CVE-2026-93866.md): Fireware OS Pre-Authentication Integer Overflow in Access Portal Allows Out-of-Bounds Write (CVSS 9.2)
- [CVE-2026-93864](https://cve.now/CVE-2026-93864.md): Fireware OS Link Following in firewalld Allows Local Arbitrary File Overwrite as Root (CVSS 7.1)
- [CVE-2026-103594](https://cve.now/CVE-2026-103594.md): Fireware OS Stack Buffer Overflow in WireGuard Configuration Allows Remote Code Execution (CVSS 9.5)
- [CVE-2026-104381](https://cve.now/CVE-2026-104381.md): Fireware OS Missing Authentication in FireCluster State Sync Allows BOVPN Tunnel Denial of Service (CVSS 6.0)
- [CVE-2026-111107](https://cve.now/CVE-2026-111107.md): Fireware OS NULL Pointer Dereference in Management Interface Allows Unauthenticated Denial of Service (CVSS 8.7)
- [CVE-2026-93865](https://cve.now/CVE-2026-93865.md): Fireware OS Missing Authentication in FireCluster Sync Daemon Allows Remote Root Action Injection (CVSS 9.2)
- [CVE-2026-115253](https://cve.now/CVE-2026-115253.md): WatchGuard Agent Incorrect Permission Assignment in Log Directory Allows Local Log Tampering (CVSS 7.3)
- [CVE-2026-96293](https://cve.now/CVE-2026-96293.md): Endpoint Security Cleartext Storage of FileVault Recovery Key in Log File (CVSS 6.9)
- [CVE-2026-13043](https://cve.now/CVE-2026-13043.md): WatchGuard Endpoint Security Missing Authentication in Kernel Memory Access Driver Allows Arbitrary Kernel Memory Access (CVSS 9.3)
- [CVE-2026-86134](https://cve.now/CVE-2026-86134.md): Fireware OS Pre-Authentication NULL Pointer Dereference Allows Remote Denial of Service (CVSS 8.7)
- [CVE-2026-86104](https://cve.now/CVE-2026-86104.md): Fireware OS Resource Exhaustion in Login Process Allows Denial of Service (CVSS 8.7)
- [CVE-2026-18145](https://cve.now/CVE-2026-18145.md): Fireware OS Stack-based Buffer Overflow in spamd Allows Remote Code Execution (CVSS 8.6)
- [CVE-2026-86101](https://cve.now/CVE-2026-86101.md): Fireware OS Authorization Bypass in SAML Login Allows Unauthorized SSLVPN Access (CVSS 7.2)
- [CVE-2026-13046](https://cve.now/CVE-2026-13046.md): Fireware OS Deserialization of Untrusted Data in samld Allows Remote Code Execution (CVSS 7.5)
- [CVE-2026-86131](https://cve.now/CVE-2026-86131.md): Fireware OS Code Injection in BOVPN Over TLS Client Allows Remote Code Execution (CVSS 9.2)
- [CVE-2026-13224](https://cve.now/CVE-2026-13224.md): Fireware OS Path Traversal in WebUI Management Agent Allows Arbitrary Local File Read (CVSS 8.2)
- [CVE-2026-86133](https://cve.now/CVE-2026-86133.md): Fireware OS Pre-Authentication Integer Underflow in iked Allows Remote Denial of Service (CVSS 8.2)
- [CVE-2026-90441](https://cve.now/CVE-2026-90441.md): Fireware OS Missing Authorization in wgagent Management API Allows Denial of Service - Variant B (CVSS 7.1)
- [CVE-2026-18105](https://cve.now/CVE-2026-18105.md): Fireware OS Uncontrolled Resource Consumption in Diagnostic Tasks Allows Denial of Service (CVSS 7.1)
- [CVE-2026-86105](https://cve.now/CVE-2026-86105.md): Fireware OS Improper Authorization in Access Portal Reverse Proxy (CVSS 5.3)
- [CVE-2026-86136](https://cve.now/CVE-2026-86136.md): Fireware OS Missing Authorization in wgagent Management API Allows Denial of Service - Variant A (CVSS 7.1)
- [CVE-2026-86132](https://cve.now/CVE-2026-86132.md): Fireware OS Pre-Authentication Integer Underflow in iked Allows Denial of Service (CVSS 8.2)
- [CVE-2026-86128](https://cve.now/CVE-2026-86128.md): Fireware OS NULL Pointer Dereference in NetFlow IPv6 Traffic Processing Allows Remote Denial of Service (CVSS 8.2)
- [CVE-2026-81433](https://cve.now/CVE-2026-81433.md): Fireware OS Pre-Authentication Stack Buffer Overflow in fingerd Allows Remote Code Execution (CVSS 8.7)
- [CVE-2026-86102](https://cve.now/CVE-2026-86102.md): WatchGuard AP Command Injection in Internal Management API Allows Command Execution (CVSS 9.3)
- [CVE-2026-87969](https://cve.now/CVE-2026-87969.md): WatchGuard AP Authenticated Command Injection in Diagnostic CLI (CVSS 8.6)
- [CVE-2026-101891](https://cve.now/CVE-2026-101891.md): WatchGuard AP Improper Access Control in API Service Allows Unauthenticated Access (CVSS 9.3)
- [CVE-2026-95676](https://cve.now/CVE-2026-95676.md): AuthPoint Gateway Improper Authentication in LDAP Sync Allows First-Factor Authentication Bypass (CVSS 7.4)
- [CVE-2026-86135](https://cve.now/CVE-2026-86135.md): Dimension CSRF Vulnerability in Database Snapshot Creation Allows Denial of Service (CVSS 7.0)
- [CVE-2026-78616](https://cve.now/CVE-2026-78616.md): Dimension Stored XSS via Trusted CA Certificate Configuration (CVSS 4.8)
- [CVE-2026-78498](https://cve.now/CVE-2026-78498.md): Dimension Server-Side Request Forgery via Email Server Test Settings (CVSS 5.1)
- [CVE-2026-78612](https://cve.now/CVE-2026-78612.md): Dimension SQL Injection in Scheduled Report (CVSS 8.6)
- [CVE-2026-78103](https://cve.now/CVE-2026-78103.md): Dimension Log Server Configuration Lock Bypass Vulnerability (CVSS 5.1)
- [CVE-2026-78615](https://cve.now/CVE-2026-78615.md): WatchGuard Dimension Reflected DOM-Based XSS in Report Detail Page (CVSS 4.6)
- [CVE-2026-78613](https://cve.now/CVE-2026-78613.md): Dimension SQL Injection in Log Viewer (CVSS 8.6)
- [CVE-2026-78495](https://cve.now/CVE-2026-78495.md): Dimension Server-Side Request Forgery via Remote Backup Connection Test (CVSS 5.3)
- [CVE-2026-78617](https://cve.now/CVE-2026-78617.md): WatchGuard Dimension Web UI Authentication Brute-Force Due to Missing Rate Limiting (CVSS 6.3)
- [CVE-2026-78047](https://cve.now/CVE-2026-78047.md): Dimension Stored XSS in Scheduled Report Task (CVSS 5.1)
- [CVE-2026-78610](https://cve.now/CVE-2026-78610.md): Dimension CSRF Vulnerability in Administrator Passphrase Change Endpoint (CVSS 8.4)
- [CVE-2026-78499](https://cve.now/CVE-2026-78499.md): Dimension SSRF via FTP Server Test Connection (CVSS 5.1)
- [CVE-2026-78174](https://cve.now/CVE-2026-78174.md): WatchGuard Dimension Session Hijack via Exposed Session Tokens in Diagnostic Logs (CVSS 9.3)
- [CVE-2026-78618](https://cve.now/CVE-2026-78618.md): Dimension Business Logic Flaw Allows Chained Backend Object Operations (CVSS 6.9)
- [CVE-2026-78500](https://cve.now/CVE-2026-78500.md): Dimension Blind SSRF via Database Test Connection Feature (CVSS 5.1)
- [CVE-2026-13108](https://cve.now/CVE-2026-13108.md): Dimension Denial-of-Service (CVSS 8.7)
- [CVE-2026-78614](https://cve.now/CVE-2026-78614.md): Dimension SQL Injection in Audit Report (CVSS 8.6)
- [CVE-2026-19315](https://cve.now/CVE-2026-19315.md): Fireware OS Pre-Authentication Type Confusion in iked Allows Remote Code Execution (CVSS 9.3)
- [CVE-2026-19314](https://cve.now/CVE-2026-19314.md): Fireware OS Integer Underflow in iked Allows Unauthenticated Denial of Service (DoS) (CVSS 8.7)
- [CVE-2026-19317](https://cve.now/CVE-2026-19317.md): Fireware OS Pre-Authentication Out-of-Bounds Read in iked Allows Denial of Service (DoS) (CVSS 8.7)
- [CVE-2026-78011](https://cve.now/CVE-2026-78011.md): Fireware OS Integer Underflow in Iked Allows Unauthenticated Denial of Service (DoS) (CVSS 8.7)
- [CVE-2026-78010](https://cve.now/CVE-2026-78010.md): Fireware OS Stack-Based Buffer Overflow in iked Allows Unauthenticated Denial of Service (CVSS 8.7)
- [CVE-2026-13086](https://cve.now/CVE-2026-13086.md): Fireware OS Stack-Based Buffer Overflow in Mobile Security epm Endpoint (CVSS 9.3)
- [CVE-2026-19313](https://cve.now/CVE-2026-19313.md): Fireware OS Pre-Authentication Heap Buffer Overflow in iked Allows Remote Code Execution (CVSS 9.3)
- [CVE-2026-19316](https://cve.now/CVE-2026-19316.md): Fireware OS Pre-Authentication Double Free in iked Allows Denial of Service (DoS) (CVSS 8.7)
- [CVE-2026-78009](https://cve.now/CVE-2026-78009.md): Fireware OS Out-of-Bounds Read in iked Allows Unauthenticated Denial of Service (DoS) (CVSS 8.7)
- [CVE-2026-19318](https://cve.now/CVE-2026-19318.md): Fireware OS Pre-Authentication Stack Buffer Overflow in iked Allows Remote Code Execution (CVSS 9.3)
- [CVE-2026-78008](https://cve.now/CVE-2026-78008.md): Fireware OS Authenticated Buffer Overflow in wgagent (CVSS 8.6)
- [CVE-2026-81851](https://cve.now/CVE-2026-81851.md): Fireware OS Heap-Based Buffer Overflow in iked Allows Denial of Service (CVSS 6.9)
- [CVE-2026-57910](https://cve.now/CVE-2026-57910.md): WatchGuard Agent improper authentication allows unauthenticated remote code execution (CVSS 9.3)
- [CVE-2026-57909](https://cve.now/CVE-2026-57909.md): WatchGuard Agent path traversal allows unauthenticated remote code execution (CVSS 9.4)
- [CVE-2026-13053](https://cve.now/CVE-2026-13053.md): WatchGuard Firebox Authenticated Out of Bounds Write in Management CLI Command Handler (CVSS 8.6)
- [CVE-2026-13050](https://cve.now/CVE-2026-13050.md): WatchGuard Firebox networkd Out of Bounds Write Vulnerability (CVSS 8.6)
- [CVE-2026-13054](https://cve.now/CVE-2026-13054.md): WatchGuard Firebox Arbitrary File Write via Path Traversal in Management Web UI (CVSS 8.6)
- [CVE-2026-13079](https://cve.now/CVE-2026-13079.md): WatchGuard Mobile VPN with SSL Windows Client Local Privilege Escalation (CVSS 7.3)
- [CVE-2026-8247](https://cve.now/CVE-2026-8247.md): WatchGuard Firebox admd Out of Bounds Write Vulnerability (CVSS 7.7)
- [CVE-2026-13728](https://cve.now/CVE-2026-13728.md): WatchGuard Firebox Hardcoded Fallback Encryption Key in Access Portal Resource Credential Database (CVSS 5.9)
- [CVE-2026-13084](https://cve.now/CVE-2026-13084.md): Null Pointer Dereference in WatchGuard Fireware OS iked Process (CVSS 8.7)
- [CVE-2026-13368](https://cve.now/CVE-2026-13368.md): WatchGuard Firebox Race Condition and Use-After-Free in Mobile VPN with IKEv2 LDAP Authentication (CVSS 9.2)
- [CVE-2026-13722](https://cve.now/CVE-2026-13722.md): WatchGuard Firebox Firmware Image Validation Bypass in WatchGuard Fireware OS (CVSS 8.6)
- [CVE-2026-13384](https://cve.now/CVE-2026-13384.md): WatchGuard Firebox wgagent Out of Bounds Write Vulnerability (CVSS 8.6)
- [CVE-2026-13383](https://cve.now/CVE-2026-13383.md): WatchGuard Firebox ikestubd Out of Bounds Write Vulnerability (CVSS 8.6)
- [CVE-2026-13377](https://cve.now/CVE-2026-13377.md): WatchGuard Firebox Stored Cross-Site-Scripting (XSS) Vulnerability in SIP Proxy Configuration (CVSS 4.8)
- [CVE-2026-13376](https://cve.now/CVE-2026-13376.md): WatchGuard Firebox Stored Cross-Site-Scripting (XSS) Vulnerability in spamBlocker Module (CVSS 4.8)
- [CVE-2026-13375](https://cve.now/CVE-2026-13375.md): WatchGuard Firebox Stored Cross-Site-Scripting (XSS) Vulnerability in Autotask Technology Integration Configuration (CVSS 4.8)
- [CVE-2026-13374](https://cve.now/CVE-2026-13374.md): WatchGuard Firebox Stored Cross-Site-Scripting (XSS) Vulnerability in ConnectWise Technology Integration Configuration (CVSS 4.8)
- [CVE-2026-13373](https://cve.now/CVE-2026-13373.md): WatchGuard Firebox Stored Cross-Site-Scripting (XSS) Vulnerability in Tigerpaw Technology Integration Configuration (CVSS 4.8)
- [CVE-2026-13371](https://cve.now/CVE-2026-13371.md): WatchGuard Firebox Management Web UI Denial of Service via Unsafe Deserialization (CVSS 6.9)
- [CVE-2026-6788](https://cve.now/CVE-2026-6788.md): Uncontrolled search path in PluginLauncher allows SYSTEM code execution in WatchGuard Agent (CVSS 8.5)
- [CVE-2026-6787](https://cve.now/CVE-2026-6787.md): Usage of a hard-coded cryptographic key in WatchGuard Agent allows inclusion of code into existing process (CVSS 8.5)
- [CVE-2026-41286](https://cve.now/CVE-2026-41286.md): Stack-based Buffer Overflow in WatchGuard Agent Discovery Service on Windows Causes Denial of Service - Variant B (CVSS 7.1)
- [CVE-2026-41288](https://cve.now/CVE-2026-41288.md): WatchGuard Agent on Windows Privilege Escalation Vulnerability (CVSS 7.3)
- [CVE-2026-41287](https://cve.now/CVE-2026-41287.md): Stack-based Buffer Overflow in WatchGuard Agent Discovery Service on Windows Causes Denial of Service - Variant A (CVSS 7.1)
- [CVE-2026-3987](https://cve.now/CVE-2026-3987.md): WatchGuard Firebox Arbitrary File Write vis Path Traversal in Fireware Web UI (CVSS 8.6)
- [CVE-2026-4315](https://cve.now/CVE-2026-4315.md): WatchGuard Firebox Cross-Site Request Forgery (CSRF) in Fireware Web UI (CVSS 7.1)
- [CVE-2026-4266](https://cve.now/CVE-2026-4266.md): WatchGuard Firebox Insecure Deserialization in Fireware Access Portal (CVSS 8.4)
- [CVE-2026-3344](https://cve.now/CVE-2026-3344.md): WatchGuard Firebox System Integrity Check Bypass (CVSS 6.9)
- [CVE-2026-3343](https://cve.now/CVE-2026-3343.md): WatchGuard Firebox Reflected Cross-Site-Scripting (XSS) Vulnerability in Fireware Web UI (CVSS 5.1)
- [CVE-2026-3342](https://cve.now/CVE-2026-3342.md): WatchGuard Firebox Out of Bounds Write Vulnerability (CVSS 8.6)
- [CVE-2026-1498](https://cve.now/CVE-2026-1498.md): WatchGuard Firebox LDAP Injection (CVSS 7.0)
- [CVE-2025-14733](https://cve.now/CVE-2025-14733.md): WatchGuard Firebox iked Out of Bounds Write Vulnerability (CVSS 9.3, KEV)
- [CVE-2025-1547](https://cve.now/CVE-2025-1547.md): WatchGuard Firebox Authenticated Stack Overflow in Certificate Request Command (CVSS 7.5)
- [CVE-2025-1910](https://cve.now/CVE-2025-1910.md): WatchGuard Mobile VPN with SSL Local Privilege Escalation via Update Package (CVSS 6.3)
- [CVE-2025-6946](https://cve.now/CVE-2025-6946.md): WatchGuard Firebox Stored Cross-Site-Scripting (XSS) Vulnerability in IPS Configuration (CVSS 4.8)
- [CVE-2025-1545](https://cve.now/CVE-2025-1545.md): WatchGuard Firebox XPath Injection Vulnerability in Web CGI (CVSS 8.2)
- [CVE-2025-11838](https://cve.now/CVE-2025-11838.md): WatchGuard Firebox iked Memory Corruption Vulnerability (CVSS 8.7)
- [CVE-2025-13940](https://cve.now/CVE-2025-13940.md): WatchGuard Firebox Boot Time System Integrity Check Bypass (CVSS 6.7)
- [CVE-2025-13939](https://cve.now/CVE-2025-13939.md): WatchGuard Firebox Stored Cross-Site-Scripting (XSS) Vulnerability in Gateway Wireless Controller (CVSS 4.8)
- [CVE-2025-13938](https://cve.now/CVE-2025-13938.md): WatchGuard Firebox Stored Cross-Site-Scripting (XSS) Vulnerability in Autotask Technology Integration Configuration (CVSS 4.8)
- [CVE-2025-13937](https://cve.now/CVE-2025-13937.md): WatchGuard Firebox Stored Cross-Site-Scripting (XSS) Vulnerability in ConnectWise Technology Integration Configuration (CVSS 4.8)
- [CVE-2025-13936](https://cve.now/CVE-2025-13936.md): WatchGuard Firebox Stored Cross-Site-Scripting (XSS) Vulnerability in Tigerpaw Technology Integration Configuration (CVSS 4.8)
- [CVE-2025-12196](https://cve.now/CVE-2025-12196.md): WatchGuard Firebox Authenticated Out of Bounds Write in Management CLI Ping Command (CVSS 8.6)
- [CVE-2025-12195](https://cve.now/CVE-2025-12195.md): WatchGuard Firebox Authenticated Out of Bounds Write in Management CLI IPSec Configuration (CVSS 8.6)
- [CVE-2025-12026](https://cve.now/CVE-2025-12026.md): WatchGuard Firebox Authenticated Out of Bounds Write in certd (CVSS 8.6)
- [CVE-2025-1549](https://cve.now/CVE-2025-1549.md): WatchGuard Mobile VPN with SSL Local Privilege Escallation (CVSS 6.3)
- [CVE-2025-4106](https://cve.now/CVE-2025-4106.md): WatchGuard Firebox leftover debug code vulnerability (CVSS 8.9)
- [CVE-2025-9242](https://cve.now/CVE-2025-9242.md): WatchGuard Firebox iked Out of Bounds Write Vulnerability (CVSS 9.3, KEV)
- [CVE-2025-6947](https://cve.now/CVE-2025-6947.md): WatchGuard Firebox Stored Cross-Site-Scripting (XSS) Vulnerability in SIP Proxy Configuration (CVSS 4.8)
- [CVE-2025-6999](https://cve.now/CVE-2025-6999.md): WatchGuard Firebox Authentication Portal Request Smuggling Vulnerability (CVSS 6.9)
- [CVE-2025-4805](https://cve.now/CVE-2025-4805.md): WatchGuard Firebox Stored Cross-Site-Scripting (XSS) Vulnerability in Acces Portal Configuration (CVSS 4.8)
- [CVE-2025-4804](https://cve.now/CVE-2025-4804.md): WatchGuard Firebox Stored Cross-Site-Scripting (XSS) Vulnerability in Hotpot Configuration (CVSS 4.8)
- [CVE-2025-2782](https://cve.now/CVE-2025-2782.md): WatchGuard Terminal Services Agent Local Privilege Escalation via Non-Standard Installation Directory (CVSS 6.3)
- [CVE-2025-2781](https://cve.now/CVE-2025-2781.md): WatchGuard Mobile VPN with SSL Local Privilege Escalation via Non-Standard Installation Directory (CVSS 6.3)
- [CVE-2025-0178](https://cve.now/CVE-2025-0178.md): WatchGaurd Firebox Host Header Injection Vulnerability (CVSS 5.1)
- [CVE-2025-1239](https://cve.now/CVE-2025-1239.md): WatchGuard Firebox Stored Cross-Site-Scripting (XSS) Vulnerability in Blocked Sites List (CVSS 4.8)
- [CVE-2025-1071](https://cve.now/CVE-2025-1071.md): WatchGuard Firebox Stored Cross-Site-Scripting (XSS) Vulnerability in spamBlocker Module (CVSS 4.8)
- [CVE-2022-31749](https://cve.now/CVE-2022-31749.md): Authenticated arbitrary file read/write in WatchGuard Fireware OS (CVSS 6.5)
- [CVE-2024-8424](https://cve.now/CVE-2024-8424.md): WatchGuard Endpoint Protection Privilege Escalation in PSANHost Enables Arbitrary File Delete as SYSTEM (CVSS 8.5)
- [CVE-2024-6594](https://cve.now/CVE-2024-6594.md): WatchGuard Firebox Single Sign-On Client Denial-of-Service (CVSS 8.7)
- [CVE-2024-6593](https://cve.now/CVE-2024-6593.md): WatchGuard Firebox Single Sign-On Agent Management Interface Authentication Bypass (CVSS 9.3)
- [CVE-2024-6592](https://cve.now/CVE-2024-6592.md): WatchGuard Firebox Single Sign-On Agent Protocol Authorization Bypass (CVSS 9.3)
- [CVE-2024-5974](https://cve.now/CVE-2024-5974.md): Firebox Authenticated Buffer Overflow Vulnerability (CVSS 8.6)
- [CVE-2024-4944](https://cve.now/CVE-2024-4944.md): Mobile VPN with SSL Local Privilege Escalation Vulnerability (CVSS 8.6)
- [CVE-2024-1417](https://cve.now/CVE-2024-1417.md): Local Code Injection Vulnerability in AuthPoint Password Manager App for macOS Safari (CVSS 7.8)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/vendors/watchguard
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.