Watchguard - vulnerabilities (CVEs)

200 CVEs in 134 products, 39 in the last 30 days, newest from 2026-10-27.

Products

• Fireware Os - 90 CVEs
• Fireware - 75 CVEs
• Dimension - 17 CVEs
• Watchguard Agent - 9 CVEs
• Soho Firewall - 8 CVEs
• Mobile Vpn With Ssl Client - 6 CVEs
• Agent - 5 CVEs
• Epdr Firmware - 5 CVEs
• Panda Ad360 Firmware - 5 CVEs
• Ap100 Firmware - 4 CVEs
• Ap102 Firmware - 4 CVEs
• Ap200 Firmware - 4 CVEs
• Edr Firmware - 4 CVEs
• Epp Firmware - 4 CVEs
• Firebox - 4 CVEs
• Firebox Ii - 4 CVEs
• Authentication Gateway - 3 CVEs
• Mobile Vpn With Ssl - 3 CVEs
• Watchguard Ap - 3 CVEs
• Xcs - 3 CVEs
• Ap300 Firmware - 2 CVEs
• Endpoint Security - 2 CVEs
• Panda Antivirus - 2 CVEs
• Panda Dome - 2 CVEs
• Serverlock - 2 CVEs
• Single Sign-on Client - 2 CVEs
• Sso Agent - 2 CVEs
• Sso Client - 2 CVEs
• Ad Helper Firmware - 1 CVEs
• Authpoint Authentication Gateway - 1 CVEs
• Authpoint Password Manager - 1 CVEs
• Firebox 2500 - 1 CVEs
• Firebox 4500 - 1 CVEs
• Firebox Pptp Vpn - 1 CVEs
• Fireware Xtm - 1 CVEs
• Hawkeye G - 1 CVEs
• Ipsec Mobile Vpn Client - 1 CVEs
• Legacy Rssa - 1 CVEs
• Panda Endpoint Administration Agent - 1 CVEs
• Panda Mobile Security - 1 CVEs
• Panda Security Vpn - 1 CVEs
• Panda Url Filtering - 1 CVEs
• Rapidstream - 1 CVEs
• Server Center - 1 CVEs
• Soho - 1 CVEs
• Sso Terminal Services Agent - 1 CVEs
• Vclass - 1 CVEs
• Watchguard System Manager - 1 CVEs
• Xmt515 Firmware - 1 CVEs
• Ap100 - 0 CVEs
• Ap102 - 0 CVEs
• Ap125 - 0 CVEs
• Ap200 - 0 CVEs
• Ap225w - 0 CVEs
• Ap300 - 0 CVEs
• Ap325 - 0 CVEs
• Ap327x - 0 CVEs
• Ap420 - 0 CVEs
• Edr - 0 CVEs
• Epdr - 0 CVEs
• Epp - 0 CVEs
• Firebox Cloud - 0 CVEs
• Firebox M200 - 0 CVEs
• Firebox M270 - 0 CVEs
• Firebox M290 - 0 CVEs
• Firebox M295 - 0 CVEs
• Firebox M300 - 0 CVEs
• Firebox M370 - 0 CVEs
• Firebox M390 - 0 CVEs
• Firebox M395 - 0 CVEs
• Firebox M400 - 0 CVEs
• Firebox M440 - 0 CVEs
• Firebox M4600 - 0 CVEs
• Firebox M470 - 0 CVEs
• Firebox M4800 - 0 CVEs
• Firebox M495 - 0 CVEs
• Firebox M500 - 0 CVEs
• Firebox M5600 - 0 CVEs
• Firebox M570 - 0 CVEs
• Firebox M5800 - 0 CVEs
• Firebox M590 - 0 CVEs
• Firebox M595 - 0 CVEs
• Firebox M670 - 0 CVEs
• Firebox M690 - 0 CVEs
• Firebox M695 - 0 CVEs
• Firebox Nv5 - 0 CVEs
• Firebox T10 - 0 CVEs
• Firebox T10-d - 0 CVEs
• Firebox T10-w - 0 CVEs
• Firebox T115-w - 0 CVEs
• Firebox T125 - 0 CVEs
• Firebox T125-w - 0 CVEs
• Firebox T145 - 0 CVEs
• Firebox T145-w - 0 CVEs
• Firebox T15 - 0 CVEs
• Firebox T15-w - 0 CVEs
• Firebox T185 - 0 CVEs
• Firebox T20 - 0 CVEs
• Firebox T20-w - 0 CVEs
• Firebox T25 - 0 CVEs
• Firebox T30 - 0 CVEs
• Firebox T30-w - 0 CVEs
• Firebox T35 - 0 CVEs
• Firebox T35-r - 0 CVEs
• Firebox T35-w - 0 CVEs
• Firebox T40 - 0 CVEs
• Firebox T40-w - 0 CVEs
• Firebox T45 - 0 CVEs
• Firebox T50 - 0 CVEs
• Firebox T50-w - 0 CVEs
• Firebox T55 - 0 CVEs
• Firebox T55-w - 0 CVEs
• Firebox T70 - 0 CVEs
• Firebox T80 - 0 CVEs
• Firebox T85 - 0 CVEs
• Firebox Xtm1520-rp - 0 CVEs
• Firebox Xtm1525-rp - 0 CVEs
• Firebox Xtm2520 - 0 CVEs
• Firebox Xtm850 - 0 CVEs
• Firebox Xtm860 - 0 CVEs
• Firebox Xtm870 - 0 CVEs
• Firebox Xtm870-f - 0 CVEs
• Fireboxcloud - 0 CVEs
• Fireboxt Nv5 - 0 CVEs
• Fireboxt T25 - 0 CVEs
• Fireboxt T45 - 0 CVEs
• Fireboxt T85 - 0 CVEs
• Fireboxv - 0 CVEs
• Panda Ad360 - 0 CVEs
• Single Watchguard Agent - 0 CVEs
• Sslvpn Client - 0 CVEs
• Terminal Services Agent - 0 CVEs
• Xmt515 - 0 CVEs
• Xtmv - 0 CVEs

Newest CVEs of Watchguard

• CVE-2026-115495 - CVSS 5.7 (medium), 2026-10-27: Cleartext Transmission of Sensitive Information vulnerability in the WatchGuard Mobile VPN with SSL client for Windows allows a local attacker who can capture…
• CVE-2026-90465 - CVSS 9.4 (critical), 2026-10-27: A missing authentication vulnerability in the FireCluster Sync processing allows an attacker positioned on the cluster interconnect, such as a compromised…
• CVE-2026-113881 - CVSS 6.1 (medium), 2026-10-27: A stack-based buffer overflow vulnerability in Fireware OS's VPN Network Access Enforcement process allows an authenticated mobile VPN user to create a denial…
• CVE-2026-90464 - CVSS 7.2 (high), 2026-10-27: An external control of file path vulnerability in a WatchGuard Fireware OS firewall diagnostic command allows a remote, authenticated attacker with at least…
• CVE-2026-112710 - CVSS 9.2 (critical), 2026-10-27: A heap-based buffer overflow vulnerability exists in the Fireware OS authentication service allows an attacker who controls or intercepts traffic to the…
• CVE-2026-90442 - CVSS 8.6 (high), 2026-10-27: A stack-based buffer overflow vulnerability in the Fireware OS certd process allows an authenticated attacker with access to the Firebox management interface…
• CVE-2026-93434 - CVSS 8.7 (high), 2026-10-27: An XPath injection vulnerability in WatchGuard Fireware OS's SSH authentication process allows a remote, unauthenticated attacker with access to the…
• CVE-2026-112709 - CVSS 9.2 (critical), 2026-10-27: A heap-based buffer overflow vulnerability in the Fireware OS authentication service allows an attacker who controls or intercepts traffic to the configured…
• CVE-2026-93862 - CVSS 7.2 (high), 2026-10-27: An out-of-bounds read vulnerability in the FireCluster Sync processing allows an attacker positioned on the cluster interconnect, such as a compromised…
• CVE-2026-103593 - CVSS 9.1 (critical), 2026-10-27: A stack-based buffer overflow vulnerability in the Fireware OS logging service allows a network-adjacent attacker who can impersonate or intercept traffic to…
• CVE-2026-111107 - CVSS 8.7 (high), 2026-10-27: A NULL pointer dereference vulnerability in WatchGuard Fireware OS’s management interface allows a remote, unauthenticated attacker with network access to the…
• CVE-2026-93857 - CVSS 9.2 (critical), 2026-10-27: A stack-based buffer overflow vulnerability in Fireware OS's SIP proxy allows a remote, unauthenticated attacker to execute arbitrary code by sending a…
• CVE-2026-93865 - CVSS 9.2 (critical), 2026-10-27: A missing authentication vulnerability in the Fireware OS FireCluster synchronization daemon allows a remote, unauthenticated attacker to invoke privileged…
• CVE-2026-104381 - CVSS 6 (medium), 2026-10-27: A missing authentication vulnerability in Fireware OS's FireCluster state synchronization feature allows an unauthenticated attacker positioned on the cluster…
• CVE-2026-93864 - CVSS 7.1 (high), 2026-10-27: A link following vulnerability in WatchGuard Fireware OS’s firewall daemon allows a local attacker with code execution as a low-privileged system process to…
• CVE-2026-103594 - CVSS 9.5 (critical), 2026-10-27: A stack-based buffer overflow vulnerability in Fireware OS's WireGuard configuration processing allows a remote attacker that has man-in-the-middle…
• CVE-2026-82332 - CVSS 5.7 (medium), 2026-10-27: An improper authentication vulnerability in WatchGuard Fireware OS's AuthPoint multi-factor authentication process allows a local, unauthenticated attacker on…
• CVE-2026-93866 - CVSS 9.2 (critical), 2026-10-27: An integer overflow vulnerability in the WebSocket connection handling used by WatchGuard Fireware OS's Access Portal allows a remote, unauthenticated…
• CVE-2026-115253 - CVSS 7.3 (high), 2026-10-22: An incorrect permission assignment vulnerability in the WatchGuard Agent's log directory allows a local, authenticated non-administrative user to create,…
• CVE-2026-96293 - CVSS 6.9 (medium), 2026-10-22: A cleartext storage of sensitive information vulnerability in WatchGuard Endpoint Security's Full Disk Encryption feature for macOS allows a local,…
• CVE-2026-13043 - CVSS 9.3 (critical), 2026-10-01: A missing authentication vulnerability in the Kernel Memory Access Driver (PSKMAD) used by WatchGuard endpoint security products allows a local, authenticated…
• CVE-2026-86134 - CVSS 8.7 (high), 2026-09-30: A NULL pointer dereference vulnerability in the WatchGuard Fireware OS authentication process allows a remote, unauthenticated attacker to crash the…
• CVE-2026-86104 - CVSS 8.7 (high), 2026-09-29: An uncontrolled resource consumption vulnerability in the Fireware OS login process (wgagent) allows a remote, unauthenticated attacker to cause a denial of…
• CVE-2026-86105 - CVSS 7.1 (high), 2026-09-29: An improper authorization vulnerability in Fireware OS's Access Portal reverse proxy allows an authenticated, low-privileged Access Portal user to access…
• CVE-2026-86132 - CVSS 8.2 (high), 2026-09-29: An integer underflow vulnerability in the WatchGuard Fireware OS IKEv2 daemon (iked) allows a remote, unauthenticated attacker to crash the process by sending…
• CVE-2026-90441 - CVSS 8.1 (high), 2026-09-29: A missing authorization vulnerability in the wgagent management daemon's session initialization function allows an authenticated, low-privileged user…
• CVE-2026-81433 - CVSS 8.7 (high), 2026-09-29: A stack-based buffer overflow vulnerability in WatchGuard Fireware OS's DHCP fingerprinting daemon (fingerd) allows an unauthenticated attacker with adjacent…
• CVE-2026-18105 - CVSS 7.1 (high), 2026-09-29: An uncontrolled resource consumption vulnerability in Fireware OS's diagnostic tasks feature allows a low-privileged, authenticated user to cause a denial of…
• CVE-2026-86131 - CVSS 9.8 (critical), 2026-09-29: A code injection vulnerability in WatchGuard Fireware OS's BOVPN Over TLS client configuration handling allows an attacker who controls the remote VPN server…
• CVE-2026-86136 - CVSS 8.1 (high), 2026-09-29: A missing authorization vulnerability in the wgagent management daemon's session initialization function allows an authenticated, low-privileged user…