Skip to content
CVE Ledger
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage

WatchGuard vulnerabilities

138 published CVEs name WatchGuard among the affected products; CISA lists 2 of them as exploited in the wild.

All 138 in the listAtom feed of new CVEs
Published CVEs
138
Last 12 months
118
Critical
26
Known exploited
2

Critical 26High 68Medium 44Low 0Not scored 0

CVEs per yearBy the year they were published

  1. 20247
  2. 202527
  3. 2026104

Known exploitedNewest addition to KEV first

  • CVE-2025-14733

    WatchGuard Firebox iked Out of Bounds Write Vulnerability

    WatchGuard · Fireware OS

    ExploitedCritical9.3
  • CVE-2025-9242

    WatchGuard Firebox iked Out of Bounds Write Vulnerability

    WatchGuard · Fireware OS

    ExploitedCritical9.3

Newest CVEs

  • CVE-2026-121637

    WatchGuard AuthPoint Gateway Improper HMAC Validation in LDAP Authentication Callback Allows Forged Authentication Results

    WatchGuard · AuthPoint Authentication Gateway

    High8.9
  • CVE-2026-121639

    WatchGuard AuthPoint Gateway Improper Authentication Allows Unauthenticated Denial of Service

    WatchGuard · AuthPoint Authentication Gateway

    Critical9.2
  • CVE-2026-121638

    WatchGuard AuthPoint Gateway Improper Certificate Validation Allows Man-in-the-Middle Attacks

    WatchGuard · AuthPoint Authentication Gateway

    Critical9.1
  • CVE-2026-121640

    WatchGuard AuthPoint Gateway Capture-replay Allows Unauthorized Administrative Actions

    WatchGuard · AuthPoint Authentication Gateway

    Critical9.1
  • CVE-2026-115495

    Mobile VPN with SSL Client for Windows: Cleartext Transmission of VPN Credentials over Local Management Socket

    WatchGuard · Mobile VPN with SSL Client

    Medium5.7
  • CVE-2026-90465

    Fireware OS Missing Authentication in FireCluster Sync Allows Privilege Escalation

    WatchGuard · Fireware OS

    High8.7
  • CVE-2026-93862

    Fireware OS Out-of-Bounds Read in FireCluster Sync Allows Denial of Service

    WatchGuard · Fireware OS

    High7.2
  • CVE-2026-112709

    Fireware OS Heap Buffer Overflow in AD Authentication Service Allows Pre-Authentication Remote Code Execution

    WatchGuard · Fireware OS

    Critical9.2
  • CVE-2026-90464

    Fireware OS Missing Command Validation allows Authenticated Arbitrary File Modification as Root

    WatchGuard · Fireware OS

    High7.2
  • CVE-2026-103593

    Fireware OS Stack Buffer Overflow in Logging Service Allows Remote Code Execution

    WatchGuard · Fireware OS

    Critical9.1

Products with the most CVEs

  1. Fireware OS91
  2. Dimension17
  3. WatchGuard Agent9
  4. Mobile VPN with SSL Client6
  5. AuthPoint Authentication Gateway5
  6. WatchGuard AP3
  7. Endpoint Security2
  8. SSO Agent2
  9. SSO Client2
  10. AuthPoint Password Manager1

Most common weaknesses

  1. CWE-787 Out-of-bounds write24
  2. CWE-79 Cross-site scripting (XSS)19
  3. CWE-121 Stack-based buffer overflow13
  4. CWE-306 Missing authentication for a critical function8
  5. CWE-191 6
  6. CWE-22 Path traversal6
  7. CWE-77 Command injection6
  8. CWE-400 Uncontrolled resource consumption5
  9. CWE-476 NULL pointer dereference5
  10. CWE-502 Deserialization of untrusted data5