Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

WatchGuard — Vulnerabilities & Security Advisories 116

Browse all 116 CVE security advisories affecting WatchGuard. AI-powered Chinese analysis, POCs, and references for each vulnerability.

WatchGuard Technologies provides network security appliances and cloud-based services primarily designed for small to medium-sized enterprises. The company’s Firebox hardware and Firebox Cloud platforms serve as the core infrastructure for perimeter defense, offering firewall, intrusion prevention, and threat detection capabilities. Historically, the product line has been associated with forty-one recorded Common Vulnerabilities and Exposures (CVEs), predominantly involving remote code execution, cross-site scripting, and privilege escalation flaws. These vulnerabilities often stem from improper input validation or authentication bypasses within the web-based management interface. While no single catastrophic incident has defined the brand’s entire history, the recurring nature of these CVEs highlights persistent challenges in securing embedded web servers. Security researchers frequently analyze these flaws to understand attack vectors against managed security gateways, emphasizing the critical need for rigorous patch management and configuration hardening in deployed environments.

CVE ID Title CVSS Severity Published
CVE-2026-115253 WatchGuard Agent Incorrect Permission Assignment in Log Directory Allows Local Log Tampering — WatchGuard Agent CWE-276 7.3 High 2026-10-22
CVE-2026-96293 Endpoint Security Cleartext Storage of FileVault Recovery Key in Log File — WatchGuard Agent CWE-312 6.9 Medium 2026-10-22
CVE-2026-13043 WatchGuard Endpoint Security Missing Authentication in Kernel Memory Access Driver Allows Arbitrary Kernel Memory Access — Endpoint Security CWE-306 9.3 Critical 2026-10-01
CVE-2026-86134 Fireware OS Pre-Authentication NULL Pointer Dereference Allows Remote Denial of Service — Fireware OS CWE-476 8.7 High 2026-09-30
CVE-2026-13224 Fireware OS Path Traversal in WebUI Management Agent Allows Arbitrary Local File Read — Fireware OS CWE-22 8.2 High 2026-09-29
CVE-2026-13046 Fireware OS Deserialization of Untrusted Data in samld Allows Remote Code Execution — Fireware OS CWE-502 7.5 High 2026-09-29
CVE-2026-90441 Fireware OS Missing Authorization in wgagent Management API Allows Denial of Service - Variant B — Fireware OS CWE-200 7.1 High 2026-09-29
CVE-2026-18105 Fireware OS Uncontrolled Resource Consumption in Diagnostic Tasks Allows Denial of Service — Fireware OS CWE-400 7.1 High 2026-09-29
CVE-2026-18145 Fireware OS Stack-based Buffer Overflow in spamd Allows Remote Code Execution — Fireware OS CWE-121 8.6 High 2026-09-29
CVE-2026-86131 Fireware OS Code Injection in BOVPN Over TLS Client Allows Remote Code Execution — Fireware OS CWE-295 9.2 Critical 2026-09-29
CVE-2026-86101 Fireware OS Authorization Bypass in SAML Login Allows Unauthorized SSLVPN Access — Fireware OS CWE-285 7.2 High 2026-09-29
CVE-2026-86104 Fireware OS Resource Exhaustion in Login Process Allows Denial of Service — Fireware OS CWE-400 8.7 High 2026-09-29
CVE-2026-86133 Fireware OS Pre-Authentication Integer Underflow in iked Allows Remote Denial of Service — Fireware OS CWE-1284 8.2 High 2026-09-29
CVE-2026-86105 Fireware OS Improper Authorization in Access Portal Reverse Proxy — Fireware OS CWE-176 5.3 Medium 2026-09-29
CVE-2026-86136 Fireware OS Missing Authorization in wgagent Management API Allows Denial of Service - Variant A — Fireware OS CWE-22 7.1 High 2026-09-29
CVE-2026-86128 Fireware OS NULL Pointer Dereference in NetFlow IPv6 Traffic Processing Allows Remote Denial of Service — Fireware OS CWE-476 8.2 High 2026-09-29
CVE-2026-81433 Fireware OS Pre-Authentication Stack Buffer Overflow in fingerd Allows Remote Code Execution — Fireware OS CWE-120 8.7 High 2026-09-29
CVE-2026-86132 Fireware OS Pre-Authentication Integer Underflow in iked Allows Denial of Service — Fireware OS CWE-191 8.2 High 2026-09-29
CVE-2026-86102 WatchGuard AP Command Injection in Internal Management API Allows Command Execution — WatchGuard AP CWE-78 9.3 Critical 2026-09-28
CVE-2026-101891 WatchGuard AP Improper Access Control in API Service Allows Unauthenticated Access — WatchGuard AP CWE-284 9.3 Critical 2026-09-28
CVE-2026-87969 WatchGuard AP Authenticated Command Injection in Diagnostic CLI — WatchGuard AP CWE-78 8.6 High 2026-09-28
CVE-2026-95676 AuthPoint Gateway Improper Authentication in LDAP Sync Allows First-Factor Authentication Bypass — AuthPoint Authentication Gateway CWE-287 7.4 High 2026-09-23
CVE-2026-86135 Dimension CSRF Vulnerability in Database Snapshot Creation Allows Denial of Service — Dimension CWE-352 7.0 High 2026-09-08
CVE-2026-78612 Dimension SQL Injection in Scheduled Report — Dimension CWE-502 8.6 High 2026-08-27
CVE-2026-78616 Dimension Stored XSS via Trusted CA Certificate Configuration — Dimension CWE-79 4.8 Medium 2026-08-27
CVE-2026-78498 Dimension Server-Side Request Forgery via Email Server Test Settings — Dimension CWE-918 5.1 Medium 2026-08-27
CVE-2026-78617 WatchGuard Dimension Web UI Authentication Brute-Force Due to Missing Rate Limiting — Dimension CWE-203 6.3 Medium 2026-08-27
CVE-2026-78615 WatchGuard Dimension Reflected DOM-Based XSS in Report Detail Page — Dimension CWE-79 4.6 Medium 2026-08-27
CVE-2026-78174 WatchGuard Dimension Session Hijack via Exposed Session Tokens in Diagnostic Logs — Dimension CWE-200 9.3 Critical 2026-08-27
CVE-2026-78613 Dimension SQL Injection in Log Viewer — Dimension CWE-89 8.6 High 2026-08-27

This page lists every published CVE security advisory associated with WatchGuard. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.