WatchGuard vulnerabilities
139 CVEs and advisories name WatchGuard as an affected vendor, 2 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-13374WatchGuard Firebox Stored Cross-Site-Scripting (XSS) Vulnerability in ConnectWise Technology Integration Configuration
- CVE-2026-13373WatchGuard Firebox Stored Cross-Site-Scripting (XSS) Vulnerability in Tigerpaw Technology Integration Configuration
- CVE-2026-13371WatchGuard Firebox Management Web UI Denial of Service via Unsafe Deserialization
- CVE-2026-6788Uncontrolled search path in PluginLauncher allows SYSTEM code execution in WatchGuard Agent
- CVE-2026-6787Usage of a hard-coded cryptographic key in WatchGuard Agent allows inclusion of code into existing process
- CVE-2026-41286Stack-based Buffer Overflow in WatchGuard Agent Discovery Service on Windows Causes Denial of Service - Variant B
- CVE-2026-41288WatchGuard Agent on Windows Privilege Escalation Vulnerability
- CVE-2026-41287Stack-based Buffer Overflow in WatchGuard Agent Discovery Service on Windows Causes Denial of Service - Variant A
- CVE-2026-3987WatchGuard Firebox Arbitrary File Write vis Path Traversal in Fireware Web UI
- CVE-2026-4315WatchGuard Firebox Cross-Site Request Forgery (CSRF) in Fireware Web UI
- CVE-2026-4266WatchGuard Firebox Insecure Deserialization in Fireware Access Portal
- CVE-2026-3344WatchGuard Firebox System Integrity Check Bypass
- CVE-2026-3343WatchGuard Firebox Reflected Cross-Site-Scripting (XSS) Vulnerability in Fireware Web UI
- CVE-2026-3342WatchGuard Firebox Out of Bounds Write Vulnerability
- CVE-2026-1498WatchGuard Firebox LDAP Injection
- CVE-2025-14733WatchGuard Firebox iked Out of Bounds Write Vulnerability
- CVE-2025-1547WatchGuard Firebox Authenticated Stack Overflow in Certificate Request Command
- CVE-2025-1910WatchGuard Mobile VPN with SSL Local Privilege Escalation via Update Package
- CVE-2025-6946WatchGuard Firebox Stored Cross-Site-Scripting (XSS) Vulnerability in IPS Configuration
- CVE-2025-1545WatchGuard Firebox XPath Injection Vulnerability in Web CGI
- CVE-2025-11838WatchGuard Firebox iked Memory Corruption Vulnerability
- CVE-2025-13940WatchGuard Firebox Boot Time System Integrity Check Bypass
- CVE-2025-13939WatchGuard Firebox Stored Cross-Site-Scripting (XSS) Vulnerability in Gateway Wireless Controller
- CVE-2025-13938WatchGuard Firebox Stored Cross-Site-Scripting (XSS) Vulnerability in Autotask Technology Integration Configuration
- CVE-2025-13937WatchGuard Firebox Stored Cross-Site-Scripting (XSS) Vulnerability in ConnectWise Technology Integration Configuration
- CVE-2025-13936WatchGuard Firebox Stored Cross-Site-Scripting (XSS) Vulnerability in Tigerpaw Technology Integration Configuration
- CVE-2025-12196WatchGuard Firebox Authenticated Out of Bounds Write in Management CLI Ping Command
- CVE-2025-12195WatchGuard Firebox Authenticated Out of Bounds Write in Management CLI IPSec Configuration
- CVE-2025-12026WatchGuard Firebox Authenticated Out of Bounds Write in certd
- CVE-2025-1549WatchGuard Mobile VPN with SSL Local Privilege Escallation