Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%

Fireware OS — Vulnerabilities & Security Advisories 59

All 59 CVE vulnerabilities found in Fireware OS, with AI-generated Chinese analysis, references, and POCs.

This page aggregates vulnerability data for Fireware OS, categorized by specific product lines and weakness classes. It collects historical security advisories and bug reports, covering a time range from the earliest recorded release through the latest stable version. Readers can track the vendor's recent disclosures, analyze the frequency of common weakness types such as buffer overflows or authentication bypasses, and review the complete vulnerability history for each installed component. The dataset supports security teams in identifying recurring patterns, evaluating patch compliance, and prioritizing remediation efforts based on severity and exploitation likelihood. By consolidating data from multiple sources, this aggregation provides a unified view of the product's security posture, enabling organizations to understand how legacy issues persist or evolve across different firmware updates.

Vendor: WatchGuard

CVE ID Title CVSS Severity Published
CVE-2026-19315 Fireware OS Pre-Authentication Type Confusion in iked Allows Remote Code Execution CWE-125 9.3 Critical 2026-08-27
CVE-2026-13086 Fireware OS Stack-Based Buffer Overflow in Mobile Security epm Endpoint CWE-121 9.3 Critical 2026-08-27
CVE-2026-19313 Fireware OS Pre-Authentication Heap Buffer Overflow in iked Allows Remote Code Execution CWE-122 9.3 Critical 2026-08-27
CVE-2026-19314 Fireware OS Integer Underflow in iked Allows Unauthenticated Denial of Service (DoS) CWE-191 8.7 High 2026-08-27
CVE-2026-19316 Fireware OS Pre-Authentication Double Free in iked Allows Denial of Service (DoS) CWE-415 8.7 High 2026-08-27
CVE-2026-19317 Fireware OS Pre-Authentication Out-of-Bounds Read in iked Allows Denial of Service (DoS) CWE-125 8.7 High 2026-08-27
CVE-2026-19318 Fireware OS Pre-Authentication Stack Buffer Overflow in iked Allows Remote Code Execution CWE-121 9.3 Critical 2026-08-27
CVE-2026-78010 Fireware OS Stack-Based Buffer Overflow in iked Allows Unauthenticated Denial of Service CWE-121 8.7 High 2026-08-27
CVE-2026-78011 Fireware OS Integer Underflow in Iked Allows Unauthenticated Denial of Service (DoS) CWE-191 8.7 High 2026-08-27
CVE-2026-78008 Fireware OS Authenticated Buffer Overflow in wgagent CWE-787 8.6 High 2026-08-27
CVE-2026-78009 Fireware OS Out-of-Bounds Read in iked Allows Unauthenticated Denial of Service (DoS) CWE-125 8.7 High 2026-08-27
CVE-2026-81851 Fireware OS Heap-Based Buffer Overflow in iked Allows Denial of Service CWE-122 6.9 Medium 2026-08-27
CVE-2026-13053 WatchGuard Firebox Authenticated Out of Bounds Write in Management CLI Command Handler CWE-787 8.6 High 2026-07-02
CVE-2026-13050 WatchGuard Firebox networkd Out of Bounds Write Vulnerability CWE-787 8.6 High 2026-07-02
CVE-2026-13054 WatchGuard Firebox Arbitrary File Write via Path Traversal in Management Web UI CWE-22 8.6 High 2026-07-02
CVE-2026-8247 WatchGuard Firebox admd Out of Bounds Write Vulnerability CWE-120 7.7 High 2026-07-02
CVE-2026-13728 WatchGuard Firebox Hardcoded Fallback Encryption Key in Access Portal Resource Credential Database CWE-798 5.9 Medium 2026-07-02
CVE-2026-13084 Null Pointer Dereference in WatchGuard Fireware OS iked Process CWE-476 8.7 High 2026-07-02
CVE-2026-13368 WatchGuard Firebox Race Condition and Use-After-Free in Mobile VPN with IKEv2 LDAP Authentication CWE-416 9.2 Critical 2026-07-02
CVE-2026-13722 WatchGuard Firebox Firmware Image Validation Bypass in WatchGuard Fireware OS CWE-347 8.6 High 2026-07-02
CVE-2026-13384 WatchGuard Firebox wgagent Out of Bounds Write Vulnerability CWE-787 8.6 High 2026-07-02
CVE-2026-13383 WatchGuard Firebox ikestubd Out of Bounds Write Vulnerability CWE-787 8.6 High 2026-07-02
CVE-2026-13377 WatchGuard Firebox Stored Cross-Site-Scripting (XSS) Vulnerability in SIP Proxy Configuration CWE-79 4.8 Medium 2026-07-02
CVE-2026-13376 WatchGuard Firebox Stored Cross-Site-Scripting (XSS) Vulnerability in spamBlocker Module CWE-79 4.8 Medium 2026-07-02
CVE-2026-13375 WatchGuard Firebox Stored Cross-Site-Scripting (XSS) Vulnerability in Autotask Technology Integration Configuration CWE-79 4.8 Medium 2026-07-02
CVE-2026-13374 WatchGuard Firebox Stored Cross-Site-Scripting (XSS) Vulnerability in ConnectWise Technology Integration Configuration CWE-79 4.8 Medium 2026-07-02
CVE-2026-13373 WatchGuard Firebox Stored Cross-Site-Scripting (XSS) Vulnerability in Tigerpaw Technology Integration Configuration CWE-79 4.8 Medium 2026-07-02
CVE-2026-13371 WatchGuard Firebox Management Web UI Denial of Service via Unsafe Deserialization CWE-502 6.9 Medium 2026-07-02
CVE-2026-3987 WatchGuard Firebox Arbitrary File Write vis Path Traversal in Fireware Web UI CWE-22 8.6 High 2026-04-01
CVE-2026-4315 WatchGuard Firebox Cross-Site Request Forgery (CSRF) in Fireware Web UI CWE-352 7.1 High 2026-03-30

All 59 known CVE vulnerabilities affecting Fireware OS with full Chinese analysis, references, and POCs where available.