Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.2ZDI-26-750: WatchGuard FireWare OS spamd statushdlr Stack-based Buffer Overflow Remote Code Execution VulnerabilityCheck if you run itEPSS 0.39%Sep 30, 2026
- High7.5ZDI-26-749: WatchGuard FireWare OS samld SAMLSession Deserialization of Untrusted Data Remote Code Execution VulnerabilityCheck if you run itEPSS 0.37%Sep 30, 2026
- High8.8ZDI-26-632: WatchGuard FireWare OS epm connect Stack-based Buffer Overflow Remote Code Execution VulnerabilityCheck if you run itEPSS 0.44%Sep 9, 2026
- High8.5Uncontrolled Search Path Element vulnerability in WatchGuard Agent on Windows allows Using Malicious Files.Check if you run itEPSS 0.18%May 6, 2026
- High8.5Use of Hard-coded Cryptographic Key vulnerability in WatchGuard Agent on Windows allows Inclusion of Code in Existing Process.Check if you run itEPSS 0.16%May 6, 2026
- High7.3Incorrect permission assignment for a resource in the patch management component of the WatchGuard Agent on Windows allows an authenticated local user to elevate their…Check if you run itEPSS 0.15%May 6, 2026
- High7.1Stack-based Buffer Overflow vulnerability in the WatchGuard Agent discovery service on Windows allows Overflow Buffers.Check if you run itEPSS 0.35%May 6, 2026
- High7.1Stack-based Buffer Overflow vulnerability in the WatchGuard Agent discovery service on Windows allows Overflow Buffers.Check if you run itEPSS 0.35%May 6, 2026
- High8.6A path traversal vulnerability in the Fireware OS Web UI on WatchGuard Firebox systems may allow a privileged authenticated remote attacker to execute arbitrary code i…Check if you run itEPSS 1.06%Apr 1, 2026
- High7.1A Cross-Site Request Forgery (CSRF) vulnerability in the WatchGuard Fireware OS WebUI could allow a remote attacker to trigger a denial-of-service (DoS) condition in t…Check if you run itEPSS 0.24%Mar 30, 2026
- High8.4An Insecure Deserialization vulnerability in WatchGuard Fireware OS allows an attacker that has obtained write access to the local filesystem through another vulnerabi…Check if you run itEPSS 0.39%Mar 30, 2026
- Medium6.9A vulnerability in WatchGuard Fireware OS may allow an attacker to bypass the Fireware OS filesystem integrity check and maintain limited persistence via a maliciously…Check if you run itEPSS 0.45%Mar 3, 2026
- Medium5.1A reflected cross-site scripting (XSS) vulnerability in the Fireware OS Web UI enabled execution of malicious JavaScript in the context of an authenticated management…Check if you run itEPSS 0.34%Mar 3, 2026
- High8.6An Out-of-bounds Write vulnerability in WatchGuard Fireware OS may allow an authenticated privileged administrator to execute arbitrary code with root permissions via…Check if you run itEPSS 0.70%Mar 3, 2026
- Critical9.3WatchGuard Firebox Out of Bounds Write VulnerabilityPatch nowKEVEPSS 26.51%Dec 18, 2025
- Critical9.3WatchGuard Firebox Out-of-Bounds Write VulnerabilityPatch nowKEVEPSS 91.80%Sep 17, 2025
- Medium4.8A stored cross-site scripting (XSS) vulnerability exists in the management interface of WatchGuard Firebox appliances via the Access Portal configuration.Check if you run itEPSS 0.57%May 16, 2025
- Medium4.8Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in WatchGuard Fireware OS allows Stored XSS via the spamBlocker module.Check if you run itEPSS 0.46%May 16, 2025
- Critical9.8WatchGuard Firebox and XTM Appliances Arbitrary Code ExecutionPatch nowKEVEPSS 78.16%Mar 4, 2022
- High8.8WatchGuard Firebox and XTM Privilege Escalation VulnerabilityPatch nowKEVEPSS 10.80%Feb 24, 2022
- UnknownWatchGuard RapidStream Appliances Command ExecutionPatch nowKEVEPSS 1.24%Sep 28, 2016
21 records · page 1 of 1
PreviousNext