Skip to content
THREATWIRE

CVE Tracker · Vendor

WatchGuard CVEs

17 CVEs in the tracker, 4 in the CISA KEV catalogue.

All vendors · RSS feed for WatchGuard · Tracker data last updated 18 Oct 2026.

Showing 17 of 17

  1. CVE-2026-13043CVSS 8.8 highEPSS 0.13%2026-10-01

    endpoint security. A missing authentication vulnerability in the Kernel Memory Access Driver (PSKMAD) used by WatchGuard endpoin…

  2. CVE-2026-90441CVSS 8.1 highEPSS 0.23%2026-09-30

    fireware. A missing authorization vulnerability in the wgagent management daemon's session initialization function allo…

  3. CVE-2026-86136CVSS 8.1 highEPSS 0.30%2026-09-30

    fireware. A missing authorization vulnerability in the wgagent management daemon's session initialization function allo…

  4. CVE-2026-86134CVSS 7.5 highEPSS 0.38%2026-09-30

    fireware. A NULL pointer dereference vulnerability in the WatchGuard Fireware OS authentication process allows a remote…

  5. CVE-2026-86133CVSS 7.5 highEPSS 0.35%2026-09-30

    fireware. An integer underflow vulnerability in the WatchGuard Fireware OS IKE daemon (iked) allows a remote attacker w…

  6. CVE-2026-86132CVSS 7.5 highEPSS 0.36%2026-09-30

    fireware. An integer underflow vulnerability in the WatchGuard Fireware OS IKEv2 daemon (iked) allows a remote, unauthe…

  7. CVE-2026-86131CVSS 9.8 criticalEPSS 0.42%2026-09-30

    fireware. A code injection vulnerability in WatchGuard Fireware OS's BOVPN Over TLS client configuration handling allow…

  8. CVE-2026-86128CVSS 7.5 highEPSS 0.36%2026-09-30

    fireware. A NULL pointer dereference vulnerability in Fireware OS's NetFlow packet-processing feature allows a remote,…

  9. CVE-2026-86105CVSS 7.1 highEPSS 0.31%2026-09-30

    fireware. An improper authorization vulnerability in Fireware OS's Access Portal reverse proxy allows an authenticated,…

  10. CVE-2026-86104CVSS 7.5 highEPSS 0.36%2026-09-30

    fireware. An uncontrolled resource consumption vulnerability in the Fireware OS login process (wgagent) allows a remote…

  11. CVE-2026-18145CVSS 7.2 highEPSS 0.39%2026-09-30

    fireware. A stack-based buffer overflow vulnerability in the spamBlocker (spamd) service of WatchGuard Fireware OS allo…

  12. CVE-2026-13046CVSS 7.2 highEPSS 0.37%2026-09-30

    fireware. A deserialization of untrusted data vulnerability in WatchGuard Fireware OS's SAML single sign-on session han…

  13. CVE-2026-95676CVSS 7.5 highEPSS 0.38%2026-09-23

    authentication gateway. A missing/improper authentication vulnerability in the WatchGuard AuthPoint Gateway's LDAP Sync first-factor…

  14. CVE-2025-9242No CVSSEPSS 91.8%KEV

    Firebox. WatchGuard Firebox Out-of-Bounds Write Vulnerability

  15. CVE-2025-14733No CVSSEPSS 26.5%KEV

    Firebox. WatchGuard Firebox Out of Bounds Write Vulnerability

  16. CVE-2022-26318No CVSSEPSS 78.2%KEV

    Firebox and XTM Appliances. WatchGuard Firebox and XTM Appliances Arbitrary Code Execution

  17. CVE-2022-23176No CVSSEPSS 10.8%KEV

    Firebox and XTM. WatchGuard Firebox and XTM Privilege Escalation Vulnerability