Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

WatchGuard — Vulnerabilities & Security Advisories 116

Browse all 116 CVE security advisories affecting WatchGuard. AI-powered Chinese analysis, POCs, and references for each vulnerability.

WatchGuard Technologies provides network security appliances and cloud-based services primarily designed for small to medium-sized enterprises. The company’s Firebox hardware and Firebox Cloud platforms serve as the core infrastructure for perimeter defense, offering firewall, intrusion prevention, and threat detection capabilities. Historically, the product line has been associated with forty-one recorded Common Vulnerabilities and Exposures (CVEs), predominantly involving remote code execution, cross-site scripting, and privilege escalation flaws. These vulnerabilities often stem from improper input validation or authentication bypasses within the web-based management interface. While no single catastrophic incident has defined the brand’s entire history, the recurring nature of these CVEs highlights persistent challenges in securing embedded web servers. Security researchers frequently analyze these flaws to understand attack vectors against managed security gateways, emphasizing the critical need for rigorous patch management and configuration hardening in deployed environments.

CVE ID Title CVSS Severity Published
CVE-2026-78613 Dimension SQL Injection in Log Viewer — Dimension CWE-89 8.6 High 2026-08-27
CVE-2026-78618 Dimension Business Logic Flaw Allows Chained Backend Object Operations — Dimension CWE-284 6.9 Medium 2026-08-27
CVE-2026-78174 WatchGuard Dimension Session Hijack via Exposed Session Tokens in Diagnostic Logs — Dimension CWE-200 9.3 Critical 2026-08-27
CVE-2026-78617 WatchGuard Dimension Web UI Authentication Brute-Force Due to Missing Rate Limiting — Dimension CWE-203 6.3 Medium 2026-08-27
CVE-2026-78103 Dimension Log Server Configuration Lock Bypass Vulnerability — Dimension CWE-841 5.1 Medium 2026-08-27
CVE-2026-78615 WatchGuard Dimension Reflected DOM-Based XSS in Report Detail Page — Dimension CWE-79 4.6 Medium 2026-08-27
CVE-2026-78500 Dimension Blind SSRF via Database Test Connection Feature — Dimension CWE-208 5.1 Medium 2026-08-27
CVE-2026-78610 Dimension CSRF Vulnerability in Administrator Passphrase Change Endpoint — Dimension CWE-352 8.4 High 2026-08-27
CVE-2026-13108 Dimension Denial-of-Service — Dimension CWE-400 8.7 High 2026-08-27
CVE-2026-19315 Fireware OS Pre-Authentication Type Confusion in iked Allows Remote Code Execution — Fireware OS CWE-125 9.3 Critical 2026-08-27
CVE-2026-78009 Fireware OS Out-of-Bounds Read in iked Allows Unauthenticated Denial of Service (DoS) — Fireware OS CWE-125 8.7 High 2026-08-27
CVE-2026-78008 Fireware OS Authenticated Buffer Overflow in wgagent — Fireware OS CWE-787 8.6 High 2026-08-27
CVE-2026-78011 Fireware OS Integer Underflow in Iked Allows Unauthenticated Denial of Service (DoS) — Fireware OS CWE-191 8.7 High 2026-08-27
CVE-2026-78010 Fireware OS Stack-Based Buffer Overflow in iked Allows Unauthenticated Denial of Service — Fireware OS CWE-121 8.7 High 2026-08-27
CVE-2026-19318 Fireware OS Pre-Authentication Stack Buffer Overflow in iked Allows Remote Code Execution — Fireware OS CWE-121 9.3 Critical 2026-08-27
CVE-2026-19317 Fireware OS Pre-Authentication Out-of-Bounds Read in iked Allows Denial of Service (DoS) — Fireware OS CWE-125 8.7 High 2026-08-27
CVE-2026-19316 Fireware OS Pre-Authentication Double Free in iked Allows Denial of Service (DoS) — Fireware OS CWE-415 8.7 High 2026-08-27
CVE-2026-19314 Fireware OS Integer Underflow in iked Allows Unauthenticated Denial of Service (DoS) — Fireware OS CWE-191 8.7 High 2026-08-27
CVE-2026-19313 Fireware OS Pre-Authentication Heap Buffer Overflow in iked Allows Remote Code Execution — Fireware OS CWE-122 9.3 Critical 2026-08-27
CVE-2026-13086 Fireware OS Stack-Based Buffer Overflow in Mobile Security epm Endpoint — Fireware OS CWE-121 9.3 Critical 2026-08-27
CVE-2026-81851 Fireware OS Heap-Based Buffer Overflow in iked Allows Denial of Service — Fireware OS CWE-122 6.9 Medium 2026-08-27
CVE-2026-57910 WatchGuard Agent improper authentication allows unauthenticated remote code execution — WatchGuard Agent CWE-306 9.3 Critical 2026-08-25
CVE-2026-57909 WatchGuard Agent path traversal allows unauthenticated remote code execution — WatchGuard Agent CWE-306 9.4 Critical 2026-08-25
CVE-2026-13053 WatchGuard Firebox Authenticated Out of Bounds Write in Management CLI Command Handler — Fireware OS CWE-787 8.6 High 2026-07-02
CVE-2026-13050 WatchGuard Firebox networkd Out of Bounds Write Vulnerability — Fireware OS CWE-787 8.6 High 2026-07-02
CVE-2026-13054 WatchGuard Firebox Arbitrary File Write via Path Traversal in Management Web UI — Fireware OS CWE-22 8.6 High 2026-07-02
CVE-2026-13079 WatchGuard Mobile VPN with SSL Windows Client Local Privilege Escalation — Mobile VPN with SSL Client CWE-732 7.3 High 2026-07-02
CVE-2026-8247 WatchGuard Firebox admd Out of Bounds Write Vulnerability — Fireware OS CWE-120 7.7 High 2026-07-02
CVE-2026-13728 WatchGuard Firebox Hardcoded Fallback Encryption Key in Access Portal Resource Credential Database — Fireware OS CWE-798 5.9 Medium 2026-07-02
CVE-2026-13084 Null Pointer Dereference in WatchGuard Fireware OS iked Process — Fireware OS CWE-476 8.7 High 2026-07-02

This page lists every published CVE security advisory associated with WatchGuard. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.