Patchfirst
Patchfirst

Vendor

WatchGuard

4 of 11 WatchGuard CVEs in Patchfirst (36%) are in of vulnerabilities exploited in the wild, 1 of them used by ransomware.

CVEs
11
In CISA KEV
436%
Known ransomware use
1
Median days to KEV
34
from publication
Latest KEV listing
19 Dec 2025
Watch WatchGuard Subscribe (RSS) JSON Feed All feeds

Products

In KEVOther CVEs
  • Firebox In KEV: 2 CVEs: 2
  • Firebox and XTM In KEV: 1 CVEs: 1
  • Firebox and XTM Appliances In KEV: 1 CVEs: 1
  • Fireware OS In KEV: 0 CVEs: 7

Top ATT&CK techniques

What attackers do with WatchGuard CVEs
Open in ATT&CK Navigator

Counts are WatchGuard CVEs linked to the technique. Each link’s provenance is on the CVE page.

WatchGuard CVEs

11 CVEs, by priority
  1. CVE-2025-9242WatchGuard Firebox Out-of-Bounds Write Vulnerability
    WatchGuard · FireboxKEVPublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter
    92.2%Top 0.18%
    79.8priority
  2. CVE-2025-14733WatchGuard Firebox Out of Bounds Write Vulnerability
    WatchGuard · FireboxKEVRansomwareCritical · 9.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter
    29.4%Top 1.8%
    79.5priority
  3. CVE-2022-26318WatchGuard Firebox and XTM Appliances Arbitrary Code Execution
    WatchGuard · Firebox and XTM AppliancesKEVPublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter
    78.2%Top 0.42%
    69.8priority
  4. CVE-2022-23176WatchGuard Firebox and XTM Privilege Escalation Vulnerability
    WatchGuard · Firebox and XTMKEVHigh · 8.8T1133External Remote ServicesT1078Valid Accounts
    10.8%Top 4.2%
    63.3priority
  5. CVE-2026-93857A stack-based buffer overflow vulnerability in Fireware OS's SIP proxy allows a remote, unauthenticated attacker to…
    WatchGuard · Fireware OSCritical · 9.2
    0.5%Top 59%
    16.0priority
  6. CVE-2026-93865A missing authentication vulnerability in the Fireware OS FireCluster synchronization daemon allows a remote…
    WatchGuard · Fireware OSCritical · 9.2
    0.5%Top 60%
    15.8priority
  7. CVE-2026-93866An integer overflow vulnerability in the WebSocket connection handling used by WatchGuard Fireware OS's Access Portal…
    WatchGuard · Fireware OSCritical · 9.2
    0.4%Top 61%
    15.6priority
  8. CVE-2026-103594A stack-based buffer overflow vulnerability in Fireware OS's WireGuard configuration processing allows a remote…
    WatchGuard · Fireware OSCritical · 9.5
    0.4%Top 62%
    15.2priority
  9. CVE-2026-112710A heap-based buffer overflow vulnerability exists in the Fireware OS authentication service allows an attacker who…
    WatchGuard · Fireware OSCritical · 9.2
    0.4%Top 64%
    14.8priority
  10. CVE-2026-112709A heap-based buffer overflow vulnerability in the Fireware OS authentication service allows an attacker who controls…
    WatchGuard · Fireware OSCritical · 9.2
    0.4%Top 64%
    14.8priority
  11. CVE-2026-90465A missing authentication vulnerability in the FireCluster Sync processing allows an attacker positioned on the cluster…
    WatchGuard · Fireware OSCritical · 9.4
    0.2%Top 85%
    10.9priority
↑ ↓ chooseEnter openEsc close