https://cvebrief.com/archive/cves/vendor/watchguard/ High and critical WatchGuard vulnerabilities covered by CVE Brief, with independent analyst commentary. en-us Fri, 28 Aug 2026 12:00:00 GMT https://cvebrief.com/cve/cve-2026-13108/?utm_source=cvebrief&utm_medium=rss&utm_campaign=vendor-feed cvebrief-watchguard-CVE-2026-13108 Fri, 28 Aug 2026 12:00:00 GMT WatchGuard Dimension is susceptible to a denial-of-service condition when an attacker sends a high volume of TCP SYN packets to the log listening service. Fix documented: 2.3.1 (CVE record). Independent analyst report on CVE Brief. https://cvebrief.com/cve/cve-2026-19314/?utm_source=cvebrief&utm_medium=rss&utm_campaign=vendor-feed cvebrief-watchguard-CVE-2026-19314 Fri, 28 Aug 2026 12:00:00 GMT An integer underflow vulnerability in the WatchGuard Fireware OS iked process allows a remote unauthenticated attacker to create a Denial of Service (DoS) condition in VPN processing by sending specially crafted network traffic. Fix documented: 2026.2.2 (CVE record). Independent analyst report on CVE Brief. https://cvebrief.com/cve/cve-2026-19316/?utm_source=cvebrief&utm_medium=rss&utm_campaign=vendor-feed cvebrief-watchguard-CVE-2026-19316 Fri, 28 Aug 2026 12:00:00 GMT A double-free vulnerability in the WatchGuard Fireware OS iked process allows a remote unauthenticated attacker to create a Denial of Service (DoS) condition in VPN processing by sending specially crafted network traffic. Fix documented: 2026.2.2 (CVE record). Independent analyst report on CVE Brief. https://cvebrief.com/cve/cve-2026-19317/?utm_source=cvebrief&utm_medium=rss&utm_campaign=vendor-feed cvebrief-watchguard-CVE-2026-19317 Fri, 28 Aug 2026 12:00:00 GMT An out-of-bounds read vulnerability in the WatchGuard Fireware OS iked process allows a remote unauthenticated attacker to create a Denial of Service (DoS) condition in VPN processing by sending specially crafted network traffic. Fix documented: 2026.2.2 (CVE record). Independent analyst report on CVE Brief. https://cvebrief.com/cve/cve-2026-78008/?utm_source=cvebrief&utm_medium=rss&utm_campaign=vendor-feed cvebrief-watchguard-CVE-2026-78008 Fri, 28 Aug 2026 12:00:00 GMT A buffer overflow vulnerability in the WatchGuard Fireware OS Management Web UI allows an authenticated administrator with network access to cause a denial of service (DoS) condition or potentially execute arbitrary code by sending specially crafted network traffic. Fix documented: 2026.2.2 (CVE record). Independent analyst report on CVE Brief. https://cvebrief.com/cve/cve-2026-78009/?utm_source=cvebrief&utm_medium=rss&utm_campaign=vendor-feed cvebrief-watchguard-CVE-2026-78009 Fri, 28 Aug 2026 12:00:00 GMT An out-of-bounds read vulnerability in the WatchGuard Fireware OS iked process allows a remote unauthenticated attacker to create a Denial of Service (DoS) condition in VPN processing by sending specially crafted network traffic. Fix documented: 2026.2.2 (CVE record). Independent analyst report on CVE Brief. https://cvebrief.com/cve/cve-2026-78010/?utm_source=cvebrief&utm_medium=rss&utm_campaign=vendor-feed cvebrief-watchguard-CVE-2026-78010 Fri, 28 Aug 2026 12:00:00 GMT A stack-based buffer overflow vulnerability in the WatchGuard Fireware OS iked process iallows a remote unauthenticated attacker to create a Denial of Service (DoS) condition in VPN processing by sending specially crafted network traffic. Fix documented: 2026.2.2 (CVE record). Independent analyst report on CVE Brief. https://cvebrief.com/cve/cve-2026-78011/?utm_source=cvebrief&utm_medium=rss&utm_campaign=vendor-feed cvebrief-watchguard-CVE-2026-78011 Fri, 28 Aug 2026 12:00:00 GMT An integer underflow vulnerability in the WatchGuard Fireware OS iked process allows a remote unauthenticated attacker to create a Denial of Service (DoS) condition in VPN processing by sending specially crafted network traffic. Fix documented: 2026.2.2 (CVE record). Independent analyst report on CVE Brief. https://cvebrief.com/cve/cve-2026-78610/?utm_source=cvebrief&utm_medium=rss&utm_campaign=vendor-feed cvebrief-watchguard-CVE-2026-78610 Fri, 28 Aug 2026 12:00:00 GMT WatchGuard Dimension's Web UI exposes an administrator passphrase change action that lacks CSRF protection. Fix documented: 2.3.1 (CVE record). Independent analyst report on CVE Brief. https://cvebrief.com/cve/cve-2026-78612/?utm_source=cvebrief&utm_medium=rss&utm_campaign=vendor-feed cvebrief-watchguard-CVE-2026-78612 Fri, 28 Aug 2026 12:00:00 GMT WatchGuard Dimension contains an authenticated SQL injection vulnerability in the scheduled report feature which allows an authenticated user with report administration permissions gain arbitrary command execution as the Dimension WebUI process user by sending specially crafted r Fix documented: 2.3.1 (CVE record). Independent analyst report on CVE Brief. https://cvebrief.com/cve/cve-2026-78613/?utm_source=cvebrief&utm_medium=rss&utm_campaign=vendor-feed cvebrief-watchguard-CVE-2026-78613 Fri, 28 Aug 2026 12:00:00 GMT WatchGuard Dimension contains an authenticated SQL injection vulnerability in the log viewer feature which allows an authenticated user with report administration permissions gain arbitrary command execution as the Dimension WebUI process user by sending specially crafted request Fix documented: 2.3.1 (CVE record). Independent analyst report on CVE Brief. https://cvebrief.com/cve/cve-2026-78614/?utm_source=cvebrief&utm_medium=rss&utm_campaign=vendor-feed cvebrief-watchguard-CVE-2026-78614 Fri, 28 Aug 2026 12:00:00 GMT WatchGuard Dimension contains an authenticated SQL injection vulnerability in the audit report feature which allows an authenticated user with report administration permissions gain arbitrary command execution as the Dimension WebUI process user by sending specially crafted reque Fix documented: 2.3.1 (CVE record). Independent analyst report on CVE Brief. https://cvebrief.com/cve/cve-2026-13050/?utm_source=cvebrief&utm_medium=rss&utm_campaign=vendor-feed cvebrief-watchguard-CVE-2026-13050 Fri, 03 Jul 2026 12:00:00 GMT An Out-of-bounds Write vulnerability in WatchGuard Fireware OS networkd process could allow an authenticated privileged user to execute arbitrary code via a specially crafted requests to the Management Web UI Fix documented: 2026.2.1 (CVE record). Independent analyst report on CVE Brief. https://cvebrief.com/cve/cve-2026-13053/?utm_source=cvebrief&utm_medium=rss&utm_campaign=vendor-feed cvebrief-watchguard-CVE-2026-13053 Fri, 03 Jul 2026 12:00:00 GMT An Out-of-bounds Write vulnerability in WatchGuard Fireware OS's CLI could allow an authenticated privileged user to execute arbitrary code via a specially crafted CLI command Fix documented: 2026.2.1 (CVE record). Independent analyst report on CVE Brief. https://cvebrief.com/cve/cve-2026-13054/?utm_source=cvebrief&utm_medium=rss&utm_campaign=vendor-feed cvebrief-watchguard-CVE-2026-13054 Fri, 03 Jul 2026 12:00:00 GMT A path traversal vulnerability in the WatchGuard Fireware OS Management Web UI allows a privileged authenticated attacker to write arbitrary files on the Firebox's filesystem Fix documented: 2026.2.1 (CVE record). Independent analyst report on CVE Brief. https://cvebrief.com/cve/cve-2026-13084/?utm_source=cvebrief&utm_medium=rss&utm_campaign=vendor-feed cvebrief-watchguard-CVE-2026-13084 Fri, 03 Jul 2026 12:00:00 GMT A null pointer dereference vulnerability in WatchGuard Fireware OS may allow a remote unauthenticated attacker to create a denial-of-service (DoS) condition by sending specially crafted IKEv2 messages Fix documented: 2026.2.1 (CVE record). Independent analyst report on CVE Brief. https://cvebrief.com/cve/cve-2026-13368/?utm_source=cvebrief&utm_medium=rss&utm_campaign=vendor-feed cvebrief-watchguard-CVE-2026-13368 Fri, 03 Jul 2026 12:00:00 GMT A use-after-free race condition in WatchGuard Fireware OS allows unauthenticated remote attackers to execute arbitrary code via the IKEv2 Mobile VPN. Fix documented: 2026.2.1 (CVE record). Independent analyst report on CVE Brief. https://cvebrief.com/cve/cve-2026-13383/?utm_source=cvebrief&utm_medium=rss&utm_campaign=vendor-feed cvebrief-watchguard-CVE-2026-13383 Fri, 03 Jul 2026 12:00:00 GMT An Out-of-bounds Write vulnerability in WatchGuard Fireware OS ikestubd process could allow an authenticated privileged user to execute arbitrary code via a specially crafted requests to the Management Web UI Fix documented: 2026.2.1 (CVE record). Independent analyst report on CVE Brief. https://cvebrief.com/cve/cve-2026-13384/?utm_source=cvebrief&utm_medium=rss&utm_campaign=vendor-feed cvebrief-watchguard-CVE-2026-13384 Fri, 03 Jul 2026 12:00:00 GMT An Out-of-bounds Write vulnerability in WatchGuard Fireware OS wgagent process could allow an authenticated privileged user to execute arbitrary code via a specially crafted requests to the Management Web UI Fix documented: 2026.2.1 (CVE record). Independent analyst report on CVE Brief. https://cvebrief.com/cve/cve-2026-13722/?utm_source=cvebrief&utm_medium=rss&utm_campaign=vendor-feed cvebrief-watchguard-CVE-2026-13722 Fri, 03 Jul 2026 12:00:00 GMT WatchGuard Fireware OS contains a firmware validation bypass when processing a backup image via the backup/restore feature Fix documented: 2026.2.1 (CVE record). Independent analyst report on CVE Brief. https://cvebrief.com/cve/cve-2026-8247/?utm_source=cvebrief&utm_medium=rss&utm_campaign=vendor-feed cvebrief-watchguard-CVE-2026-8247 Fri, 03 Jul 2026 12:00:00 GMT An Out-of-bounds Write vulnerability in WatchGuard Fireware OS may allow an unauthenticated attacker on the same local network segment to execute arbitrary code Fix documented: 2026.2.1 (CVE record). Independent analyst report on CVE Brief. https://cvebrief.com/cve/cve-2026-3342/?utm_source=cvebrief&utm_medium=rss&utm_campaign=vendor-feed cvebrief-watchguard-CVE-2026-3342 Thu, 05 Mar 2026 12:00:00 GMT An Out-of-bounds Write vulnerability in WatchGuard Fireware OS may allow an authenticated privileged administrator to execute arbitrary code with root permissions via an exposed management interface Independent analyst report on CVE Brief. https://cvebrief.com/cve/cve-2025-14733/?utm_source=cvebrief&utm_medium=rss&utm_campaign=vendor-feed cvebrief-watchguard-CVE-2025-14733 Sat, 20 Dec 2025 12:00:00 GMT An Out-of-bounds Write vulnerability in WatchGuard Fireware OS may allow a remote unauthenticated attacker to execute arbitrary code. Fix documented: 2025.1.4 (CVE record). Independent analyst report on CVE Brief. https://cvebrief.com/cve/cve-2025-9242/?utm_source=cvebrief&utm_medium=rss&utm_campaign=vendor-feed cvebrief-watchguard-CVE-2025-9242 Thu, 13 Nov 2025 12:00:00 GMT WatchGuard Firebox Out-of-Bounds Write Vulnerability - Active in CISA KEV catalog. Fix documented: 12.11.4 (CVE record). Independent analyst report on CVE Brief.