Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

WatchGuard — Vulnerabilities & Security Advisories 116

Browse all 116 CVE security advisories affecting WatchGuard. AI-powered Chinese analysis, POCs, and references for each vulnerability.

WatchGuard Technologies provides network security appliances and cloud-based services primarily designed for small to medium-sized enterprises. The company’s Firebox hardware and Firebox Cloud platforms serve as the core infrastructure for perimeter defense, offering firewall, intrusion prevention, and threat detection capabilities. Historically, the product line has been associated with forty-one recorded Common Vulnerabilities and Exposures (CVEs), predominantly involving remote code execution, cross-site scripting, and privilege escalation flaws. These vulnerabilities often stem from improper input validation or authentication bypasses within the web-based management interface. While no single catastrophic incident has defined the brand’s entire history, the recurring nature of these CVEs highlights persistent challenges in securing embedded web servers. Security researchers frequently analyze these flaws to understand attack vectors against managed security gateways, emphasizing the critical need for rigorous patch management and configuration hardening in deployed environments.

CVE ID Title CVSS Severity Published
CVE-2025-13938 WatchGuard Firebox Stored Cross-Site-Scripting (XSS) Vulnerability in Autotask Technology Integration Configuration — Fireware OS CWE-79 4.8 Medium 2025-12-04
CVE-2025-13937 WatchGuard Firebox Stored Cross-Site-Scripting (XSS) Vulnerability in ConnectWise Technology Integration Configuration — Fireware OS CWE-79 4.8 Medium 2025-12-04
CVE-2025-13936 WatchGuard Firebox Stored Cross-Site-Scripting (XSS) Vulnerability in Tigerpaw Technology Integration Configuration — Fireware OS CWE-79 4.8 Medium 2025-12-04
CVE-2025-12196 WatchGuard Firebox Authenticated Out of Bounds Write in Management CLI Ping Command — Fireware OS CWE-787 8.6 High 2025-12-04
CVE-2025-12195 WatchGuard Firebox Authenticated Out of Bounds Write in Management CLI IPSec Configuration — Fireware OS CWE-787 8.6 High 2025-12-04
CVE-2025-12026 WatchGuard Firebox Authenticated Out of Bounds Write in certd — Fireware OS CWE-787 8.6 High 2025-12-04
CVE-2025-1549 WatchGuard Mobile VPN with SSL Local Privilege Escallation — Mobile VPN with SSL Client CWE-77 6.3 Medium 2025-10-29
CVE-2025-4106 WatchGuard Firebox leftover debug code vulnerability — Fireware OS CWE-489 8.9 High 2025-10-24
CVE-2025-9242 WatchGuard Firebox iked Out of Bounds Write Vulnerability — Fireware OS CWE-787 9.3 Critical 2025-09-17
CVE-2025-6947 WatchGuard Firebox Stored Cross-Site-Scripting (XSS) Vulnerability in SIP Proxy Configuration — Fireware OS CWE-79 4.8 Medium 2025-09-15
CVE-2025-6999 WatchGuard Firebox Authentication Portal Request Smuggling Vulnerability — Fireware OS CWE-444 6.9 Medium 2025-09-15
CVE-2025-4805 WatchGuard Firebox Stored Cross-Site-Scripting (XSS) Vulnerability in Acces Portal Configuration — Fireware OS CWE-79 4.8 Medium 2025-05-16
CVE-2025-4804 WatchGuard Firebox Stored Cross-Site-Scripting (XSS) Vulnerability in Hotpot Configuration — Fireware OS CWE-79 4.8 Medium 2025-05-16
CVE-2025-2782 WatchGuard Terminal Services Agent Local Privilege Escalation via Non-Standard Installation Directory — SSO Terminal Services Agent CWE-276 6.3 Medium 2025-03-28
CVE-2025-2781 WatchGuard Mobile VPN with SSL Local Privilege Escalation via Non-Standard Installation Directory — Mobile VPN with SSL Client CWE-276 6.3 Medium 2025-03-28
CVE-2025-0178 WatchGaurd Firebox Host Header Injection Vulnerability — Fireware OS CWE-20 5.1 Medium 2025-02-14
CVE-2025-1239 WatchGuard Firebox Stored Cross-Site-Scripting (XSS) Vulnerability in Blocked Sites List — Fireware OS CWE-79 4.8 Medium 2025-02-14
CVE-2025-1071 WatchGuard Firebox Stored Cross-Site-Scripting (XSS) Vulnerability in spamBlocker Module — Fireware OS CWE-79 4.8 Medium 2025-02-14
CVE-2022-31749 Authenticated arbitrary file read/write in WatchGuard Fireware OS — Fireware OS CWE-88 6.5 Medium 2025-01-27
CVE-2024-8424 WatchGuard Endpoint Protection Privilege Escalation in PSANHost Enables Arbitrary File Delete as SYSTEM — Endpoint Security CWE-269 8.5 High 2024-11-07
CVE-2024-6594 WatchGuard Firebox Single Sign-On Client Denial-of-Service — SSO Client CWE-755 8.7 High 2024-09-25
CVE-2024-6593 WatchGuard Firebox Single Sign-On Agent Management Interface Authentication Bypass — SSO Agent CWE-863 9.3 Critical 2024-09-25
CVE-2024-6592 WatchGuard Firebox Single Sign-On Agent Protocol Authorization Bypass — SSO Client CWE-306 9.3 Critical 2024-09-25
CVE-2024-5974 Firebox Authenticated Buffer Overflow Vulnerability — Fireware OS CWE-120 8.6 High 2024-07-09
CVE-2024-4944 Mobile VPN with SSL Local Privilege Escalation Vulnerability — Mobile VPN with SSL Client CWE-77 8.6 High 2024-07-09
CVE-2024-1417 Local Code Injection Vulnerability in AuthPoint Password Manager App for macOS Safari — AuthPoint Password Manager CWE-77 7.8 High 2024-05-16

This page lists every published CVE security advisory associated with WatchGuard. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.