Patchfirst: WatchGuard vulnerabilitieshttps://patchfirst.co/vendor/watchguard/New and newly exploited WatchGuard CVEs, with CISA KEV, EPSS and ATT&CK context. Newest 50 by publication or KEV listing.en-gb360Sat, 31 Oct 2026 05:11:25 GMTCVE-2026-93857: A stack-based buffer overflow vulnerability in Fireware OS's SIP proxy allows a remote, unauthenticated attacker to…https://patchfirst.co/cve/CVE-2026-93857/CVE-2026-93857Tue, 27 Oct 2026 00:00:00 GMTWatchGuard · Fireware OS. Not in CISA KEV. EPSS 0.5% (higher than 40.8% of CVEs). CVSS 9.2 CRITICAL. Priority 16.0 of 100.CVE-2026-93865: A missing authentication vulnerability in the Fireware OS FireCluster synchronization daemon allows a remote…https://patchfirst.co/cve/CVE-2026-93865/CVE-2026-93865Tue, 27 Oct 2026 00:00:00 GMTWatchGuard · Fireware OS. Not in CISA KEV. EPSS 0.5% (higher than 40.1% of CVEs). CVSS 9.2 CRITICAL. Priority 15.8 of 100.CVE-2026-93866: An integer overflow vulnerability in the WebSocket connection handling used by WatchGuard Fireware OS's Access Portal…https://patchfirst.co/cve/CVE-2026-93866/CVE-2026-93866Tue, 27 Oct 2026 00:00:00 GMTWatchGuard · Fireware OS. Not in CISA KEV. EPSS 0.4% (higher than 39% of CVEs). CVSS 9.2 CRITICAL. Priority 15.6 of 100.CVE-2026-103594: A stack-based buffer overflow vulnerability in Fireware OS's WireGuard configuration processing allows a remote…https://patchfirst.co/cve/CVE-2026-103594/CVE-2026-103594Tue, 27 Oct 2026 00:00:00 GMTWatchGuard · Fireware OS. Not in CISA KEV. EPSS 0.4% (higher than 37.5% of CVEs). CVSS 9.5 CRITICAL. Priority 15.2 of 100.CVE-2026-112710: A heap-based buffer overflow vulnerability exists in the Fireware OS authentication service allows an attacker who…https://patchfirst.co/cve/CVE-2026-112710/CVE-2026-112710Tue, 27 Oct 2026 00:00:00 GMTWatchGuard · Fireware OS. Not in CISA KEV. EPSS 0.4% (higher than 36.2% of CVEs). CVSS 9.2 CRITICAL. Priority 14.8 of 100.CVE-2026-112709: A heap-based buffer overflow vulnerability in the Fireware OS authentication service allows an attacker who controls…https://patchfirst.co/cve/CVE-2026-112709/CVE-2026-112709Tue, 27 Oct 2026 00:00:00 GMTWatchGuard · Fireware OS. Not in CISA KEV. EPSS 0.4% (higher than 36.2% of CVEs). CVSS 9.2 CRITICAL. Priority 14.8 of 100.CVE-2026-90465: A missing authentication vulnerability in the FireCluster Sync processing allows an attacker positioned on the cluster…https://patchfirst.co/cve/CVE-2026-90465/CVE-2026-90465Tue, 27 Oct 2026 00:00:00 GMTWatchGuard · Fireware OS. Not in CISA KEV. EPSS 0.2% (higher than 14.8% of CVEs). CVSS 9.4 CRITICAL. Priority 10.9 of 100.[KEV] CVE-2025-14733: WatchGuard Firebox Out of Bounds Write Vulnerabilityhttps://patchfirst.co/cve/CVE-2025-14733/CVE-2025-14733#kevFri, 19 Dec 2025 00:00:00 GMTWatchGuard · Firebox. In CISA KEV since 2025-12-19, known ransomware use. ENISA EUVD lists it as exploited. EPSS 29.4% (higher than 98.2% of CVEs). CVSS 9.8 CRITICAL. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter. Priority 79.5 of 100.kevransomwareT1190T1059[KEV] CVE-2025-9242: WatchGuard Firebox Out-of-Bounds Write Vulnerabilityhttps://patchfirst.co/cve/CVE-2025-9242/CVE-2025-9242#kevWed, 12 Nov 2025 00:00:00 GMTWatchGuard · Firebox. In CISA KEV since 2025-11-12. ENISA EUVD lists it as exploited. EPSS 92.2% (higher than 99.82% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter. Priority 79.8 of 100.kevpublic-exploitT1190T1059[KEV] CVE-2022-23176: WatchGuard Firebox and XTM Privilege Escalation Vulnerabilityhttps://patchfirst.co/cve/CVE-2022-23176/CVE-2022-23176#kevMon, 11 Apr 2022 00:00:00 GMTWatchGuard · Firebox and XTM. In CISA KEV since 2022-04-11. ENISA EUVD lists it as exploited. EPSS 10.8% (higher than 95.8% of CVEs). CVSS 8.8 HIGH. ATT&CK: T1133 External Remote Services; T1078 Valid Accounts. Priority 63.3 of 100.kevT1133T1078[KEV] CVE-2022-26318: WatchGuard Firebox and XTM Appliances Arbitrary Code Executionhttps://patchfirst.co/cve/CVE-2022-26318/CVE-2022-26318#kevFri, 25 Mar 2022 00:00:00 GMTWatchGuard · Firebox and XTM Appliances. In CISA KEV since 2022-03-25. ENISA EUVD lists it as exploited. EPSS 78.2% (higher than 99.58% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter. Priority 69.8 of 100.kevpublic-exploitT1190T1059