Browse CVEs

HIGH 7.2 CVE-2025-12026 An Out-of-bounds Write vulnerability in WatchGuard Fireware OS’s certificate request command could allow an authenticated privileged user to execute … Fireware 12.5.14 / 12.11.5+ Fix from $1,9502025-12-04 HIGH 7.2 CVE-2025-12195 An Out-of-bounds Write vulnerability in WatchGuard Fireware OS's CLI could allow an authenticated privileged user to execute arbitrary code via speci… Fireware 12.5.14 / 12.11.5+ Fix from $1,9502025-12-04 CRITICAL 9.8 CVE-2025-9242 KEVEPSS 91% An Out-of-bounds Write vulnerability in the WatchGuard Fireware OS iked process may allow a remote unauthenticated attacker to execute arbitrary code… Fireware 12.5.13 / 12.11.4+ Fix from $2,3002025-09-17 MEDIUM 6.1 CVE-2025-0178 An Improper Input Validation vulnerability in WatchGuard Fireware OS allows an attacker with network access to manipulate the value of the HTTP Host … Fireware 12.5.13 / 12.11.1+ Fix from $1,6002025-02-14 HIGH 7.8 CVE-2024-13043 Panda Security Dome Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affe… Panda Dome Mitigation only Fix from $1,9502024-12-30 CRITICAL 9.1 CVE-2024-6592 An incorrect authorization vulnerability in the protocol communication between the WatchGuard Authentication Gateway (aka Single Sign-On Agent) on Wi… Authentication Gateway after 12.10.2 Fix from $2,3002024-09-25 CRITICAL 9.1 CVE-2024-6593 Incorrect Authorization vulnerability in WatchGuard Authentication Gateway (aka Single Sign-On Agent) on Windows allows an attacker with network acce… Authentication Gateway after 12.10.2 Fix from $2,3002024-09-25 HIGH 7.5 CVE-2024-6594 Improper Handling of Exceptional Conditions vulnerability in the WatchGuard Single Sign-On Client on Windows causes the client to crash while handlin… Single Sign On Client after 12.7 Fix from $1,9502024-09-25 HIGH 7.8 CVE-2024-4944 A local privilege escalation vlnerability in the WatchGuard Mobile VPN with SSL client on Windows enables a local user to execute arbitrary commands … Mobile Vpn With Ssl 12.10.4+ Fix from $1,9502024-07-09 HIGH 7.2 CVE-2024-5974 A buffer overflow in WatchGuard Fireware OS could may allow an authenticated remote attacker with privileged management access to execute arbitrary c… Fireware 12.5.12 / 12.10.4+ Fix from $1,9502024-07-09 HIGH 7.8 CVE-2023-26236 An issue was discovered in WatchGuard EPDR 8.0.21.0002. Due to a weak implementation of message handling between WatchGuard EPDR processes, it is pos… Epp Firmware 8.00.22.0010+ Fix from $1,9502023-10-05 MEDIUM 6.7 CVE-2023-26237 An issue was discovered in WatchGuard EPDR 8.0.21.0002. It is possible to bypass the defensive capabilities by adding a registry key as SYSTEM. Epp Firmware 8.00.22.0010+ Fix from $1,6002023-10-05 MEDIUM 5.5 CVE-2023-26238 An issue was discovered in WatchGuard EPDR 8.0.21.0002. It is possible to enable or disable defensive capabilities by sending a crafted message to a … Epp Firmware 8.00.22.0010+ Fix from $1,6002023-10-05 MEDIUM 5.5 CVE-2023-26239 An issue was discovered in WatchGuard EPDR 8.0.21.0002. Due to a weak implementation of a password check, it is possible to obtain credentials to acc… Epp Firmware 8.00.22.0010+ Fix from $1,6002023-10-05 MEDIUM 6.5 CVE-2023-37849 A DLL hijacking vulnerability in Panda Security VPN for Windows prior to version v15.14.8 allows attackers to execute arbitrary code via placing a cr… Panda Security Vpn 15.14.8+ Fix from $1,6002023-07-13 CRITICAL 9.8 CVE-2022-31789 An integer overflow in WatchGuard Firebox and XTM appliances allows an unauthenticated remote attacker to trigger a buffer overflow and potentially e… Fireware 12.1.4 / 12.5.10+ Fix from $2,3002022-09-06 HIGH 7.8 CVE-2022-31791 WatchGuard Firebox and XTM appliances allow a local attacker (that has already obtained shell access) to elevate their privileges and execute code wi… Fireware 12.1.4 / 12.5.10+ Fix from $1,9502022-09-06 MEDIUM 5.4 CVE-2022-31792 A stored cross-site scripting (XSS) vulnerability exists in the management web interface of WatchGuard Firebox and XTM appliances. A remote attacker … Fireware 12.1.4 / 12.5.10+ Fix from $1,6002022-09-06 HIGH 7.5 CVE-2022-31790 WatchGuard Firebox and XTM appliances allow an unauthenticated remote attacker to retrieve sensitive authentication server settings by sending a mali… Fireware 12.1.4 / 12.5.10+ Fix from $1,9502022-09-06 CRITICAL 9.1 CVE-2022-25361 WatchGuard Firebox and XTM appliances allow an unauthenticated remote attacker to delete arbitrary files from a limited set of directories on the sys… Fireware 12.1.3 / 12.5.9+ Fix from $2,3002022-06-07 CRITICAL 9.8 CVE-2022-26318 KEVEPSS 78% On WatchGuard Firebox and XTM appliances, an unauthenticated user can execute arbitrary code, aka FBX-22786. This vulnerability impacts Fireware OS b… Fireware 12.1.3 / 12.5.9+ Fix from $2,3002022-03-04 HIGH 8.8 CVE-2022-25291 An integer overflow in WatchGuard Firebox and XTM appliances allows an authenticated remote attacker to trigger a heap-based buffer overflow and pote… Fireware 12.1.3 / 12.5.9+ Fix from $1,9502022-02-24 HIGH 8.8 CVE-2022-25292 A wgagent stack-based buffer overflow in WatchGuard Firebox and XTM appliances allows an authenticated remote attacker to potentially execute arbitra… Fireware 12.1.3 / 12.5.9+ Fix from $1,9502022-02-24 HIGH 8.8 CVE-2022-25293 A systemd stack-based buffer overflow in WatchGuard Firebox and XTM appliances allows an authenticated remote attacker to potentially execute arbitra… Fireware 12.1.3 / 12.5.9+ Fix from $1,9502022-02-24 HIGH 8.8 CVE-2022-25360 WatchGuard Firebox and XTM appliances allow an authenticated remote attacker with unprivileged credentials to upload files to arbitrary locations. Th… Fireware 12.1.3 / 12.5.9+ Fix from $1,9502022-02-24 MEDIUM 6.5 CVE-2022-25363 WatchGuard Firebox and XTM appliances allow an authenticated remote attacker with unprivileged credentials to modify privileged management user crede… Fireware 12.1.3 / 12.5.9+ Fix from $1,6002022-02-24 MEDIUM 6.5 CVE-2022-25290 WatchGuard Firebox and XTM appliances allow an authenticated remote attacker with unprivileged credentials to retrieve certificate private keys. This… Fireware 12.1.3 / 12.5.9+ Fix from $1,6002022-02-24 HIGH 8.8 CVE-2022-23176 KEVEPSS 13% WatchGuard Firebox and XTM appliances allow a remote attacker with unprivileged credentials to access the system with a privileged management session… Fireware 12.1.3 / 12.5.7+ Fix from $1,9502022-02-24 HIGH 7.8 CVE-2021-34998 This vulnerability allows local attackers to escalate privileges on affected installations of Panda Security Free Antivirus 20.2.0.0. An attacker mus… Panda Antivirus 20.02.00+ Fix from $1,9502022-01-13 HIGH 7.5 CVE-2020-10532 The AD Helper component in WatchGuard Fireware before 5.8.5.10317 allows remote attackers to discover cleartext passwords via the /domains/list URI. Ad Helper Firmware 5.8.5.10317+ Fix from $1,9502020-03-12