Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

WatchGuard — Vulnerabilities & Security Advisories 116

Browse all 116 CVE security advisories affecting WatchGuard. AI-powered Chinese analysis, POCs, and references for each vulnerability.

WatchGuard Technologies provides network security appliances and cloud-based services primarily designed for small to medium-sized enterprises. The company’s Firebox hardware and Firebox Cloud platforms serve as the core infrastructure for perimeter defense, offering firewall, intrusion prevention, and threat detection capabilities. Historically, the product line has been associated with forty-one recorded Common Vulnerabilities and Exposures (CVEs), predominantly involving remote code execution, cross-site scripting, and privilege escalation flaws. These vulnerabilities often stem from improper input validation or authentication bypasses within the web-based management interface. While no single catastrophic incident has defined the brand’s entire history, the recurring nature of these CVEs highlights persistent challenges in securing embedded web servers. Security researchers frequently analyze these flaws to understand attack vectors against managed security gateways, emphasizing the critical need for rigorous patch management and configuration hardening in deployed environments.

Found 74 results / 116 Clear Filters
CVE ID Title CVSS Severity Published
CVE-2026-86134 Fireware OS Pre-Authentication NULL Pointer Dereference Allows Remote Denial of Service — Fireware OS CWE-476 8.7 High 2026-09-30
CVE-2026-13224 Fireware OS Path Traversal in WebUI Management Agent Allows Arbitrary Local File Read — Fireware OS CWE-22 8.2 High 2026-09-29
CVE-2026-13046 Fireware OS Deserialization of Untrusted Data in samld Allows Remote Code Execution — Fireware OS CWE-502 7.5 High 2026-09-29
CVE-2026-90441 Fireware OS Missing Authorization in wgagent Management API Allows Denial of Service - Variant B — Fireware OS CWE-200 7.1 High 2026-09-29
CVE-2026-18105 Fireware OS Uncontrolled Resource Consumption in Diagnostic Tasks Allows Denial of Service — Fireware OS CWE-400 7.1 High 2026-09-29
CVE-2026-18145 Fireware OS Stack-based Buffer Overflow in spamd Allows Remote Code Execution — Fireware OS CWE-121 8.6 High 2026-09-29
CVE-2026-86131 Fireware OS Code Injection in BOVPN Over TLS Client Allows Remote Code Execution — Fireware OS CWE-295 9.2 Critical 2026-09-29
CVE-2026-86101 Fireware OS Authorization Bypass in SAML Login Allows Unauthorized SSLVPN Access — Fireware OS CWE-285 7.2 High 2026-09-29
CVE-2026-86104 Fireware OS Resource Exhaustion in Login Process Allows Denial of Service — Fireware OS CWE-400 8.7 High 2026-09-29
CVE-2026-86133 Fireware OS Pre-Authentication Integer Underflow in iked Allows Remote Denial of Service — Fireware OS CWE-1284 8.2 High 2026-09-29
CVE-2026-86105 Fireware OS Improper Authorization in Access Portal Reverse Proxy — Fireware OS CWE-176 5.3 Medium 2026-09-29
CVE-2026-86136 Fireware OS Missing Authorization in wgagent Management API Allows Denial of Service - Variant A — Fireware OS CWE-22 7.1 High 2026-09-29
CVE-2026-86128 Fireware OS NULL Pointer Dereference in NetFlow IPv6 Traffic Processing Allows Remote Denial of Service — Fireware OS CWE-476 8.2 High 2026-09-29
CVE-2026-81433 Fireware OS Pre-Authentication Stack Buffer Overflow in fingerd Allows Remote Code Execution — Fireware OS CWE-120 8.7 High 2026-09-29
CVE-2026-86132 Fireware OS Pre-Authentication Integer Underflow in iked Allows Denial of Service — Fireware OS CWE-191 8.2 High 2026-09-29
CVE-2026-19315 Fireware OS Pre-Authentication Type Confusion in iked Allows Remote Code Execution — Fireware OS CWE-125 9.3 Critical 2026-08-27
CVE-2026-78008 Fireware OS Authenticated Buffer Overflow in wgagent — Fireware OS CWE-787 8.6 High 2026-08-27
CVE-2026-19317 Fireware OS Pre-Authentication Out-of-Bounds Read in iked Allows Denial of Service (DoS) — Fireware OS CWE-125 8.7 High 2026-08-27
CVE-2026-19313 Fireware OS Pre-Authentication Heap Buffer Overflow in iked Allows Remote Code Execution — Fireware OS CWE-122 9.3 Critical 2026-08-27
CVE-2026-19314 Fireware OS Integer Underflow in iked Allows Unauthenticated Denial of Service (DoS) — Fireware OS CWE-191 8.7 High 2026-08-27
CVE-2026-19316 Fireware OS Pre-Authentication Double Free in iked Allows Denial of Service (DoS) — Fireware OS CWE-415 8.7 High 2026-08-27
CVE-2026-19318 Fireware OS Pre-Authentication Stack Buffer Overflow in iked Allows Remote Code Execution — Fireware OS CWE-121 9.3 Critical 2026-08-27
CVE-2026-78010 Fireware OS Stack-Based Buffer Overflow in iked Allows Unauthenticated Denial of Service — Fireware OS CWE-121 8.7 High 2026-08-27
CVE-2026-78011 Fireware OS Integer Underflow in Iked Allows Unauthenticated Denial of Service (DoS) — Fireware OS CWE-191 8.7 High 2026-08-27
CVE-2026-78009 Fireware OS Out-of-Bounds Read in iked Allows Unauthenticated Denial of Service (DoS) — Fireware OS CWE-125 8.7 High 2026-08-27
CVE-2026-13086 Fireware OS Stack-Based Buffer Overflow in Mobile Security epm Endpoint — Fireware OS CWE-121 9.3 Critical 2026-08-27
CVE-2026-81851 Fireware OS Heap-Based Buffer Overflow in iked Allows Denial of Service — Fireware OS CWE-122 6.9 Medium 2026-08-27
CVE-2026-13053 WatchGuard Firebox Authenticated Out of Bounds Write in Management CLI Command Handler — Fireware OS CWE-787 8.6 High 2026-07-02
CVE-2026-13050 WatchGuard Firebox networkd Out of Bounds Write Vulnerability — Fireware OS CWE-787 8.6 High 2026-07-02
CVE-2026-13054 WatchGuard Firebox Arbitrary File Write via Path Traversal in Management Web UI — Fireware OS CWE-22 8.6 High 2026-07-02

This page lists every published CVE security advisory associated with WatchGuard. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.