Vulnerability index

Browse CVEs

98 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Fireware HIGH 7.2
CVE-2025-12026

An Out-of-bounds Write vulnerability in WatchGuard Fireware OS’s certificate request command could allow an authenticated privileged user to execute …

Fix: 12.5.14 / 12.11.5+
Fix from $1,950 2025-12-04
Fireware HIGH 7.2
CVE-2025-12195

An Out-of-bounds Write vulnerability in WatchGuard Fireware OS's CLI could allow an authenticated privileged user to execute arbitrary code via speci…

Fix: 12.5.14 / 12.11.5+
Fix from $1,950 2025-12-04
Fireware CRITICAL 9.8
CVE-2025-9242 KEVEPSS 91%

An Out-of-bounds Write vulnerability in the WatchGuard Fireware OS iked process may allow a remote unauthenticated attacker to execute arbitrary code…

Fix: 12.5.13 / 12.11.4+
Fix from $2,300 2025-09-17
Fireware MEDIUM 6.1
CVE-2025-0178

An Improper Input Validation vulnerability in WatchGuard Fireware OS allows an attacker with network access to manipulate the value of the HTTP Host …

Fix: 12.5.13 / 12.11.1+
Fix from $1,600 2025-02-14
Panda Dome HIGH 7.8
CVE-2024-13043

Panda Security Dome Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affe…

Mitigation only
Fix from $1,950 2024-12-30
Authentication Gateway CRITICAL 9.1
CVE-2024-6592

An incorrect authorization vulnerability in the protocol communication between the WatchGuard Authentication Gateway (aka Single Sign-On Agent) on Wi…

Fix: after 12.10.2
Fix from $2,300 2024-09-25
Authentication Gateway CRITICAL 9.1
CVE-2024-6593

Incorrect Authorization vulnerability in WatchGuard Authentication Gateway (aka Single Sign-On Agent) on Windows allows an attacker with network acce…

Fix: after 12.10.2
Fix from $2,300 2024-09-25
Single Sign On Client HIGH 7.5
CVE-2024-6594

Improper Handling of Exceptional Conditions vulnerability in the WatchGuard Single Sign-On Client on Windows causes the client to crash while handlin…

Fix: after 12.7
Fix from $1,950 2024-09-25
Mobile Vpn With Ssl HIGH 7.8
CVE-2024-4944

A local privilege escalation vlnerability in the WatchGuard Mobile VPN with SSL client on Windows enables a local user to execute arbitrary commands …

Fix: 12.10.4+
Fix from $1,950 2024-07-09
Fireware HIGH 7.2
CVE-2024-5974

A buffer overflow in WatchGuard Fireware OS could may allow an authenticated remote attacker with privileged management access to execute arbitrary c…

Fix: 12.5.12 / 12.10.4+
Fix from $1,950 2024-07-09
Epp Firmware HIGH 7.8
CVE-2023-26236

An issue was discovered in WatchGuard EPDR 8.0.21.0002. Due to a weak implementation of message handling between WatchGuard EPDR processes, it is pos…

Fix: 8.00.22.0010+
Fix from $1,950 2023-10-05
Epp Firmware MEDIUM 6.7
CVE-2023-26237

An issue was discovered in WatchGuard EPDR 8.0.21.0002. It is possible to bypass the defensive capabilities by adding a registry key as SYSTEM.

Fix: 8.00.22.0010+
Fix from $1,600 2023-10-05
Epp Firmware MEDIUM 5.5
CVE-2023-26238

An issue was discovered in WatchGuard EPDR 8.0.21.0002. It is possible to enable or disable defensive capabilities by sending a crafted message to a …

Fix: 8.00.22.0010+
Fix from $1,600 2023-10-05
Epp Firmware MEDIUM 5.5
CVE-2023-26239

An issue was discovered in WatchGuard EPDR 8.0.21.0002. Due to a weak implementation of a password check, it is possible to obtain credentials to acc…

Fix: 8.00.22.0010+
Fix from $1,600 2023-10-05
Panda Security Vpn MEDIUM 6.5
CVE-2023-37849

A DLL hijacking vulnerability in Panda Security VPN for Windows prior to version v15.14.8 allows attackers to execute arbitrary code via placing a cr…

Fix: 15.14.8+
Fix from $1,600 2023-07-13
Fireware CRITICAL 9.8
CVE-2022-31789

An integer overflow in WatchGuard Firebox and XTM appliances allows an unauthenticated remote attacker to trigger a buffer overflow and potentially e…

Fix: 12.1.4 / 12.5.10+
Fix from $2,300 2022-09-06
Fireware HIGH 7.8
CVE-2022-31791

WatchGuard Firebox and XTM appliances allow a local attacker (that has already obtained shell access) to elevate their privileges and execute code wi…

Fix: 12.1.4 / 12.5.10+
Fix from $1,950 2022-09-06
Fireware MEDIUM 5.4
CVE-2022-31792

A stored cross-site scripting (XSS) vulnerability exists in the management web interface of WatchGuard Firebox and XTM appliances. A remote attacker …

Fix: 12.1.4 / 12.5.10+
Fix from $1,600 2022-09-06
Fireware HIGH 7.5
CVE-2022-31790

WatchGuard Firebox and XTM appliances allow an unauthenticated remote attacker to retrieve sensitive authentication server settings by sending a mali…

Fix: 12.1.4 / 12.5.10+
Fix from $1,950 2022-09-06
Fireware CRITICAL 9.1
CVE-2022-25361

WatchGuard Firebox and XTM appliances allow an unauthenticated remote attacker to delete arbitrary files from a limited set of directories on the sys…

Fix: 12.1.3 / 12.5.9+
Fix from $2,300 2022-06-07
Fireware CRITICAL 9.8
CVE-2022-26318 KEVEPSS 78%

On WatchGuard Firebox and XTM appliances, an unauthenticated user can execute arbitrary code, aka FBX-22786. This vulnerability impacts Fireware OS b…

Fix: 12.1.3 / 12.5.9+
Fix from $2,300 2022-03-04
Fireware HIGH 8.8
CVE-2022-25291

An integer overflow in WatchGuard Firebox and XTM appliances allows an authenticated remote attacker to trigger a heap-based buffer overflow and pote…

Fix: 12.1.3 / 12.5.9+
Fix from $1,950 2022-02-24
Fireware HIGH 8.8
CVE-2022-25292

A wgagent stack-based buffer overflow in WatchGuard Firebox and XTM appliances allows an authenticated remote attacker to potentially execute arbitra…

Fix: 12.1.3 / 12.5.9+
Fix from $1,950 2022-02-24
Fireware HIGH 8.8
CVE-2022-25293

A systemd stack-based buffer overflow in WatchGuard Firebox and XTM appliances allows an authenticated remote attacker to potentially execute arbitra…

Fix: 12.1.3 / 12.5.9+
Fix from $1,950 2022-02-24
Fireware HIGH 8.8
CVE-2022-25360

WatchGuard Firebox and XTM appliances allow an authenticated remote attacker with unprivileged credentials to upload files to arbitrary locations. Th…

Fix: 12.1.3 / 12.5.9+
Fix from $1,950 2022-02-24
Fireware MEDIUM 6.5
CVE-2022-25363

WatchGuard Firebox and XTM appliances allow an authenticated remote attacker with unprivileged credentials to modify privileged management user crede…

Fix: 12.1.3 / 12.5.9+
Fix from $1,600 2022-02-24
Fireware MEDIUM 6.5
CVE-2022-25290

WatchGuard Firebox and XTM appliances allow an authenticated remote attacker with unprivileged credentials to retrieve certificate private keys. This…

Fix: 12.1.3 / 12.5.9+
Fix from $1,600 2022-02-24
Fireware HIGH 8.8
CVE-2022-23176 KEVEPSS 13%

WatchGuard Firebox and XTM appliances allow a remote attacker with unprivileged credentials to access the system with a privileged management session…

Fix: 12.1.3 / 12.5.7+
Fix from $1,950 2022-02-24
Panda Antivirus HIGH 7.8
CVE-2021-34998

This vulnerability allows local attackers to escalate privileges on affected installations of Panda Security Free Antivirus 20.2.0.0. An attacker mus…

Fix: 20.02.00+
Fix from $1,950 2022-01-13
Ad Helper Firmware HIGH 7.5
CVE-2020-10532

The AD Helper component in WatchGuard Fireware before 5.8.5.10317 allows remote attackers to discover cleartext passwords via the /domains/list URI.

Fix: 5.8.5.10317+
Fix from $1,950 2020-03-12