WatchGuard vulnerabilities
139 CVEs and advisories name WatchGuard as an affected vendor, 2 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2025-4106WatchGuard Firebox leftover debug code vulnerability
- CVE-2025-9242WatchGuard Firebox iked Out of Bounds Write Vulnerability
- CVE-2025-6947WatchGuard Firebox Stored Cross-Site-Scripting (XSS) Vulnerability in SIP Proxy Configuration
- CVE-2025-6999WatchGuard Firebox Authentication Portal Request Smuggling Vulnerability
- CVE-2025-4805WatchGuard Firebox Stored Cross-Site-Scripting (XSS) Vulnerability in Acces Portal Configuration
- CVE-2025-4804WatchGuard Firebox Stored Cross-Site-Scripting (XSS) Vulnerability in Hotpot Configuration
- CVE-2025-2782WatchGuard Terminal Services Agent Local Privilege Escalation via Non-Standard Installation Directory
- CVE-2025-2781WatchGuard Mobile VPN with SSL Local Privilege Escalation via Non-Standard Installation Directory
- CVE-2025-0178WatchGaurd Firebox Host Header Injection Vulnerability
- CVE-2025-1239WatchGuard Firebox Stored Cross-Site-Scripting (XSS) Vulnerability in Blocked Sites List
- CVE-2025-1071WatchGuard Firebox Stored Cross-Site-Scripting (XSS) Vulnerability in spamBlocker Module
- CVE-2022-31749Authenticated arbitrary file read/write in WatchGuard Fireware OS
- CVE-2024-8424WatchGuard Endpoint Protection Privilege Escalation in PSANHost Enables Arbitrary File Delete as SYSTEM
- CVE-2024-6594WatchGuard Firebox Single Sign-On Client Denial-of-Service
- CVE-2024-6593WatchGuard Firebox Single Sign-On Agent Management Interface Authentication Bypass
- CVE-2024-6592WatchGuard Firebox Single Sign-On Agent Protocol Authorization Bypass
- CVE-2024-5974Firebox Authenticated Buffer Overflow Vulnerability
- CVE-2024-4944Mobile VPN with SSL Local Privilege Escalation Vulnerability
- CVE-2024-1417Local Code Injection Vulnerability in AuthPoint Password Manager App for macOS Safari