WatchGuard vulnerabilities
139 CVEs and advisories name WatchGuard as an affected vendor, 2 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-13046Fireware OS Deserialization of Untrusted Data in samld Allows Remote Code Execution
- CVE-2026-86131Fireware OS Code Injection in BOVPN Over TLS Client Allows Remote Code Execution
- CVE-2026-13224Fireware OS Path Traversal in WebUI Management Agent Allows Arbitrary Local File Read
- CVE-2026-86133Fireware OS Pre-Authentication Integer Underflow in iked Allows Remote Denial of Service
- CVE-2026-90441Fireware OS Missing Authorization in wgagent Management API Allows Denial of Service - Variant B
- CVE-2026-18105Fireware OS Uncontrolled Resource Consumption in Diagnostic Tasks Allows Denial of Service
- CVE-2026-86105Fireware OS Improper Authorization in Access Portal Reverse Proxy
- CVE-2026-86136Fireware OS Missing Authorization in wgagent Management API Allows Denial of Service - Variant A
- CVE-2026-86132Fireware OS Pre-Authentication Integer Underflow in iked Allows Denial of Service
- CVE-2026-86128Fireware OS NULL Pointer Dereference in NetFlow IPv6 Traffic Processing Allows Remote Denial of Service
- CVE-2026-81433Fireware OS Pre-Authentication Stack Buffer Overflow in fingerd Allows Remote Code Execution
- CVE-2026-86102WatchGuard AP Command Injection in Internal Management API Allows Command Execution
- CVE-2026-87969WatchGuard AP Authenticated Command Injection in Diagnostic CLI
- CVE-2026-101891WatchGuard AP Improper Access Control in API Service Allows Unauthenticated Access
- CVE-2026-95676AuthPoint Gateway Improper Authentication in LDAP Sync Allows First-Factor Authentication Bypass
- CVE-2026-86135Dimension CSRF Vulnerability in Database Snapshot Creation Allows Denial of Service
- CVE-2026-78616Dimension Stored XSS via Trusted CA Certificate Configuration
- CVE-2026-78498Dimension Server-Side Request Forgery via Email Server Test Settings
- CVE-2026-78612Dimension SQL Injection in Scheduled Report
- CVE-2026-78103Dimension Log Server Configuration Lock Bypass Vulnerability
- CVE-2026-78615WatchGuard Dimension Reflected DOM-Based XSS in Report Detail Page
- CVE-2026-78613Dimension SQL Injection in Log Viewer
- CVE-2026-78495Dimension Server-Side Request Forgery via Remote Backup Connection Test
- CVE-2026-78617WatchGuard Dimension Web UI Authentication Brute-Force Due to Missing Rate Limiting
- CVE-2026-78047Dimension Stored XSS in Scheduled Report Task
- CVE-2026-78610Dimension CSRF Vulnerability in Administrator Passphrase Change Endpoint
- CVE-2026-78499Dimension SSRF via FTP Server Test Connection
- CVE-2026-78174WatchGuard Dimension Session Hijack via Exposed Session Tokens in Diagnostic Logs
- CVE-2026-78618Dimension Business Logic Flaw Allows Chained Backend Object Operations
- CVE-2026-78500Dimension Blind SSRF via Database Test Connection Feature