Skip to content

RadicalNotion.AI

We do not sell or share your personal information

© 2026 RadicalNotion.AI

Security Data

CWE Directory
CAPEC Directory
CNA Directory
CNA Report Cards
Data Sources

Calculators

CVSS Calculator
CVSS 4.0
CVSS 3.1
CVSS 3.0
CVSS 2.0

Platform

My Vulnerabilities
Insights
Notifications
Account
Pricing

Learn

All guides
What is a CVE?
What is CVSS?
The CISA KEV catalog
What is EPSS?

Company

About us
Blog
Book a demo

Get Started

Sign up
Log in

Legal

Privacy
Terms

Security data

Weaknesses (CWE)The MITRE CWE weakness catalog
Attack Patterns (CAPEC)MITRE CAPEC attack patterns
CNAsNumbering authorities + report cards
VendorsVulnerabilities by vendor

Tools

CVSS CalculatorScore CVSS 4.0, 3.1, 3.0 & 2.0

Resources

LearnPlain-English security guides
Data SourcesHow we source CVE data

About Us Blog Pricing Book a Demo

Log in

Home
Vendors
Watchguard
Fireware Os

watchguard Fireware OS Vulnerabilities: CVEs, CISA KEV & Security Advisories

31 CVEs

2 in CISA KEV

watchguard Fireware OS Vulnerabilities

CVE security advisories and vulnerability history for Fireware OS by watchguard.

31

Total CVEs

Published

2

In CISA KEV

Exploited in the wild

3

Public exploits

With known exploit

6.8

Avg CVSS

2024–2026

Last updated April 1, 2026

Overview

watchguard Fireware OS has 31 published CVE records since 2024, of which 2 are in CISA's Known Exploited Vulnerabilities catalog and 3 have a known public exploit. The average CVSS base score across scored CVEs is 6.8.

This page aggregates every publicly disclosed vulnerability (CVE) affecting watchguard Fireware OS, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list.

Severity and exploitation

How the CVSS severity of watchguard Fireware OS's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical2

High13

Medium16

Low0

In CISA’s Known Exploited Vulnerabilities catalog

2

2 of watchguard Fireware OS's CVEs are confirmed exploited in the wild.

Public exploits

3

3 of watchguard Fireware OS's CVEs have a known public exploit available.

Affected versions and CVEs

Browse every watchguard Fireware OS version named in a CVE, then pick one to see only the CVEs that affect it.

Fixed in

> 12.11.410 CVEs
> 2025.1.210 CVEs
> 12.5.138 CVEs
> 11.12.4+5417307 CVEs
> 12.11.24 CVEs
> 12.5.12+7013244 CVEs
> 12.113 CVEs
> 12.11.73 CVEs
> 12.11.83 CVEs
> 2026.1.13 CVEs
> 2026.1.23 CVEs
> 12.11.12 CVEs
> 12.5.162 CVEs
> 12.10.31 CVE
> 12.11.31 CVE
> 12.11.51 CVE
> 12.11.61 CVE
> 12.5.12+6876971 CVE
> 12.5.141 CVE
> 12.5.151 CVE
> 12.5.171 CVE
> 2025.11 CVE
> 2025.1.31 CVE
> 2026.01 CVE
12.1.41 CVE
12.11.21 CVE
12.5.x1 CVE
12.8.11 CVE

Find a version

31 CVEs

Sort

WatchGuard Firebox Arbitrary File Write vis Path Traversal in Fireware Web UI
CVE-2026-3987
Patch
CWE-22
High · CVSS 8.6
EPSS 0.6% (71th pct)2026-04-01
WatchGuard Firebox Cross-Site Request Forgery (CSRF) in Fireware Web UI
CVE-2026-4315
Patch
CWE-352
High · CVSS 7.1
EPSS 0.1% (23th pct)2026-03-30
WatchGuard Firebox Insecure Deserialization in Fireware Access Portal
CVE-2026-4266
Patch
CWE-502
High · CVSS 8.4
EPSS 0.0% (6th pct)2026-03-30
WatchGuard Firebox System Integrity Check Bypass
CVE-2026-3344
Patch
CWE-440
Medium · CVSS 6.9
EPSS 0.0% (13th pct)2026-03-03
WatchGuard Firebox Reflected Cross-Site-Scripting (XSS) Vulnerability in Fireware Web UI
CVE-2026-3343
Patch
CWE-79
Medium · CVSS 5.1
EPSS 0.0% (14th pct)2026-03-03
WatchGuard Firebox Out of Bounds Write Vulnerability
CVE-2026-3342
Patch
CWE-787
High · CVSS 8.6
EPSS 0.0% (14th pct)2026-03-03
WatchGuard Firebox LDAP Injection
CVE-2026-1498
Patch
CWE-90
High · CVSS 7.0
EPSS 0.1% (27th pct)2026-01-30
WatchGuard Firebox iked Out of Bounds Write Vulnerability
CVE-2025-14733
CISA KEV
Public exploit
Patch
CWE-787
Added to CISA KEV 2025-12-19
Critical · CVSS 9.3
EPSS 27.8% (97th pct)2025-12-19
WatchGuard Firebox Authenticated Stack Overflow in Certificate Request Command
CVE-2025-1547
Patch
CWE-121
High · CVSS 7.5
EPSS 0.0% (11th pct)2025-12-04
WatchGuard Firebox Stored Cross-Site-Scripting (XSS) Vulnerability in IPS Configuration
CVE-2025-6946
Patch
CWE-79
Medium · CVSS 4.8
EPSS 0.0% (7th pct)2025-12-04
WatchGuard Firebox XPath Injection Vulnerability in Web CGI
CVE-2025-1545
Patch
CWE-91
High · CVSS 8.2
EPSS 0.1% (18th pct)2025-12-04
WatchGuard Firebox iked Memory Corruption Vulnerability
CVE-2025-11838
Patch
CWE-763
High · CVSS 8.7
EPSS 0.1% (29th pct)2025-12-04
WatchGuard Firebox Boot Time System Integrity Check Bypass
CVE-2025-13940
Patch
CWE-440
Medium · CVSS 6.7
EPSS 0.0% (3th pct)2025-12-04
WatchGuard Firebox Stored Cross-Site-Scripting (XSS) Vulnerability in Gateway Wireless Controller
CVE-2025-13939
Patch
CWE-79
Medium · CVSS 4.8
EPSS 0.0% (7th pct)2025-12-04
WatchGuard Firebox Stored Cross-Site-Scripting (XSS) Vulnerability in Autotask Technology Integration Configuration
CVE-2025-13938
Patch
CWE-79
Medium · CVSS 4.8
EPSS 0.0% (7th pct)2025-12-04
WatchGuard Firebox Stored Cross-Site-Scripting (XSS) Vulnerability in ConnectWise Technology Integration Configuration
CVE-2025-13937
Patch
CWE-79
Medium · CVSS 4.8
EPSS 0.0% (7th pct)2025-12-04
WatchGuard Firebox Stored Cross-Site-Scripting (XSS) Vulnerability in Tigerpaw Technology Integration Configuration
CVE-2025-13936
Patch
CWE-79
Medium · CVSS 4.8
EPSS 0.0% (7th pct)2025-12-04
WatchGuard Firebox Authenticated Out of Bounds Write in Management CLI Ping Command
CVE-2025-12196
Patch
CWE-787
High · CVSS 8.6
EPSS 0.2% (36th pct)2025-12-04
WatchGuard Firebox Authenticated Out of Bounds Write in Management CLI IPSec Configuration
CVE-2025-12195
Patch
CWE-787
High · CVSS 8.6
EPSS 0.2% (36th pct)2025-12-04
WatchGuard Firebox Authenticated Out of Bounds Write in certd
CVE-2025-12026
Patch
CWE-787
High · CVSS 8.6
EPSS 0.1% (34th pct)2025-12-04
WatchGuard Firebox leftover debug code vulnerability
CVE-2025-4106
Patch
CWE-489
High · CVSS 8.9
EPSS 0.1% (19th pct)2025-10-24
WatchGuard Firebox iked Out of Bounds Write Vulnerability
CVE-2025-9242
CISA KEV
Public exploit
Patch
CWE-787
Added to CISA KEV 2025-11-12
Critical · CVSS 9.3
EPSS 79.0% (99th pct)2025-09-17
WatchGuard Firebox Stored Cross-Site-Scripting (XSS) Vulnerability in SIP Proxy Configuration
CVE-2025-6947
Patch
CWE-79
Medium · CVSS 4.8
EPSS 0.1% (33th pct)2025-09-15
WatchGuard Firebox Authentication Portal Request Smuggling Vulnerability
CVE-2025-6999
Patch
CWE-444
Medium · CVSS 6.9
EPSS 0.2% (40th pct)2025-09-15
WatchGuard Firebox Stored Cross-Site-Scripting (XSS) Vulnerability in Acces Portal Configuration
CVE-2025-4805
Patch
CWE-79
Medium · CVSS 4.8
EPSS 0.6% (69th pct)2025-05-16
WatchGuard Firebox Stored Cross-Site-Scripting (XSS) Vulnerability in Hotpot Configuration
CVE-2025-4804
Patch
CWE-79
Medium · CVSS 4.8
EPSS 0.6% (69th pct)2025-05-16
WatchGaurd Firebox Host Header Injection Vulnerability
CVE-2025-0178
Patch
CWE-20
Medium · CVSS 5.1
EPSS 0.3% (50th pct)2025-02-14
WatchGuard Firebox Stored Cross-Site-Scripting (XSS) Vulnerability in Blocked Sites List
CVE-2025-1239
Patch
CWE-79
Medium · CVSS 4.8
EPSS 0.4% (58th pct)2025-02-14
WatchGuard Firebox Stored Cross-Site-Scripting (XSS) Vulnerability in spamBlocker Module
CVE-2025-1071
Patch
CWE-79
Medium · CVSS 4.8
EPSS 0.5% (66th pct)2025-02-14
Authenticated arbitrary file read/write in WatchGuard Fireware OS
CVE-2022-31749
Public exploit
Patch
CWE-88
Medium · CVSS 6.5
EPSS 0.5% (68th pct)2025-01-27

Showing 30 of 31

Common weakness types

The CWE weakness categories most often found in watchguard Fireware OS CVEs. Follow any weakness for its full explanation.

CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')11 CVEs
CWE-787Out-of-bounds Write6 CVEs
CWE-440Expected Behavior Violation2 CVEs
CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')1 CVE
CWE-352Cross-Site Request Forgery (CSRF)1 CVE
CWE-444Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')1 CVE
CWE-489Active Debug Code1 CVE
CWE-502Deserialization of Untrusted Data1 CVE

Disclosure activity by year

How many watchguard Fireware OS CVEs were published each year.

2024

1

2025

23

2026

7

Other watchguard products

Browse vulnerabilities for other products by watchguard.

fireware41 CVEs fireboxcloud21 CVEs firebox m27021 CVEs firebox m29021 CVEs firebox m37021 CVEs firebox m39021 CVEs firebox m44021 CVEs firebox m47021 CVEs

All watchguard vulnerabilities

Frequently asked questions

Common questions about watchguard Fireware OS vulnerabilities.

How many CVEs does watchguard Fireware OS have?

watchguard Fireware OS has 31 published CVE records since 2024.

How many watchguard Fireware OS CVEs are in CISA KEV?

Yes — 2 of watchguard Fireware OS's CVEs are listed in CISA's Known Exploited Vulnerabilities catalog, confirmed exploited in the wild and carrying a CISA remediation deadline.

Are there public exploits for watchguard Fireware OS vulnerabilities?

Yes — 3 of watchguard Fireware OS's CVEs have a known public exploit.

Which versions of watchguard Fireware OS are affected?

28 distinct watchguard Fireware OS versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in watchguard Fireware OS CVEs?

watchguard Fireware OS's CVEs most often map to these CWE weakness types: CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-787 (Out-of-bounds Write), CWE-440 (Expected Behavior Violation), CWE-22 (Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')).

How many critical watchguard Fireware OS vulnerabilities are there?

watchguard Fireware OS has 2 critical and 13 high-severity CVEs.

What is the average severity of watchguard Fireware OS CVEs?

The average CVSS base score across watchguard Fireware OS's scored CVEs is 6.8.

References

All watchguard vulnerabilities
The MITRE CVE Program (opens in a new tab)
Learn: What is a CVE?
CWE directory: the weakness types these CVEs map to

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track watchguard Fireware OS vulnerabilities

Monitor new watchguard Fireware OS vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing

On this page

Overview
Severity and exploitation
Affected versions and CVEs
Common weakness types
Disclosure activity
Other products
FAQ
References