Vulnerabilities in WatchGuard

62 results
Vexday analysis

WatchGuard acumula 62 vulnerabilidades no histórico, com 21 publicadas nos últimos 90 dias indicando ritmo elevado de descobertas; cinco são críticas e duas estão sob exploração ativa em campo. A fraqueza dominante (CWE-79, injeção de código) sugere falhas sistemáticas em validação de entrada, exigindo priorização imediata de patches para as duas vulnerabilidades em KEV e revisão ampla da postura de segurança do fornecedor.

CVE-2025-6999MEDIUMWatchGuard Firebox Authentication Portal Request Smuggling VulnerabilityEPSS 0.5%CVE-2025-4805MEDIUMWatchGuard Firebox Stored Cross-Site-Scripting (XSS) Vulnerability in Acces Portal ConfigurationEPSS 0.5%CVE-2026-13084HIGHNull Pointer Dereference in WatchGuard Fireware OS iked ProcessEPSS 0.5%CVE-2025-1545HIGHWatchGuard Firebox XPath Injection Vulnerability in Web CGIEPSS 0.5%CVE-2025-11838HIGHWatchGuard Firebox iked Memory Corruption VulnerabilityEPSS 0.5%CVE-2025-6947MEDIUMWatchGuard Firebox Stored Cross-Site-Scripting (XSS) Vulnerability in SIP Proxy ConfigurationEPSS 0.4%CVE-2025-4804MEDIUMWatchGuard Firebox Stored Cross-Site-Scripting (XSS) Vulnerability in Hotpot ConfigurationEPSS 0.4%CVE-2025-12026HIGHWatchGuard Firebox Authenticated Out of Bounds Write in certdEPSS 0.4%CVE-2024-4944HIGHMobile VPN with SSL Local Privilege Escalation VulnerabilityEPSS 0.3%CVE-2025-4106HIGHWatchGuard Firebox leftover debug code vulnerabilityEPSS 0.3%CVE-2026-13371MEDIUMWatchGuard Firebox Management Web UI Denial of Service via Unsafe DeserializationEPSS 0.3%CVE-2025-1071MEDIUMWatchGuard Firebox Stored Cross-Site-Scripting (XSS) Vulnerability in spamBlocker ModuleEPSS 0.3%CVE-2026-4266HIGHWatchGuard Firebox Insecure Deserialization in Fireware Access PortalEPSS 0.3%CVE-2025-1547HIGHWatchGuard Firebox Authenticated Stack Overflow in Certificate Request CommandEPSS 0.3%CVE-2026-3344MEDIUMWatchGuard Firebox System Integrity Check BypassEPSS 0.3%CVE-2025-1910MEDIUMWatchGuard Mobile VPN with SSL Local Privilege Escalation via Update PackageEPSS 0.3%CVE-2026-13722HIGHWatchGuard Firebox Firmware Image Validation Bypass in WatchGuard Fireware OSEPSS 0.2%CVE-2025-6946MEDIUMWatchGuard Firebox Stored Cross-Site-Scripting (XSS) Vulnerability in IPS ConfigurationEPSS 0.2%CVE-2025-0178MEDIUMWatchGaurd Firebox Host Header Injection VulnerabilityEPSS 0.2%CVE-2026-4315HIGHWatchGuard Firebox Cross-Site Request Forgery (CSRF) in Fireware Web UIEPSS 0.2%