{"schema_version":1,"title":"Watchguard Fireware OS vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 45 vulnerabilities in Watchguard Fireware OS: 0 in the last 7 days and 28 in the last 90 days, 1 of them critical and 1 exploited in the wild. The most recent, CVE-2026-78011, was published on 28 August 2026.","url":"https://junglewise.ai/threats/technologies/fireware-os","json_url":"https://junglewise.ai/threats/technologies/fireware-os.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/technologies/fireware-os","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"technology","counts":{"high":6,"all_time":45,"critical":1,"exploited":1,"last_7_days":0,"last_30_days":12,"last_90_days":28,"last_365_days":45},"latest":[{"cve":"CVE-2026-78011","cvss":8.7,"epss":0.0054,"slug":"cve-2026-78011-watchguard-fireware-os-integer-underflow-in-iked","title":"WatchGuard Fireware OS integer underflow in iked","severity":"info","exploited":false,"published_at":"2026-08-28T02:16:22.563+00:00","url":"https://junglewise.ai/threats/cve-2026-78011-watchguard-fireware-os-integer-underflow-in-iked"},{"cve":"CVE-2026-78010","cvss":8.7,"epss":0.0054,"slug":"cve-2026-78010-watchguard-fireware-os-stack-based-buffer-overflow-in-iked","title":"WatchGuard Fireware OS stack-based buffer overflow in iked","severity":"info","exploited":false,"published_at":"2026-08-28T02:16:22.417+00:00","url":"https://junglewise.ai/threats/cve-2026-78010-watchguard-fireware-os-stack-based-buffer-overflow-in-iked"},{"cve":"CVE-2026-78009","cvss":8.7,"epss":0.0054,"slug":"cve-2026-78009-watchguard-fireware-os-out-of-bounds-read-in-iked","title":"WatchGuard Fireware OS out-of-bounds read in iked","severity":"info","exploited":false,"published_at":"2026-08-28T02:16:22.293+00:00","url":"https://junglewise.ai/threats/cve-2026-78009-watchguard-fireware-os-out-of-bounds-read-in-iked"},{"cve":"CVE-2026-78008","cvss":8.6,"epss":0.0061,"slug":"cve-2026-78008-watchguard-fireware-os-buffer-overflow-in-wgagent","title":"WatchGuard Fireware OS buffer overflow in wgagent","severity":"info","exploited":false,"published_at":"2026-08-28T02:16:22.167+00:00","url":"https://junglewise.ai/threats/cve-2026-78008-watchguard-fireware-os-buffer-overflow-in-wgagent"},{"cve":"CVE-2026-19318","cvss":9.3,"epss":0.0047,"slug":"cve-2026-19318-watchguard-fireware-os-stack-buffer-overflow-in-iked","title":"WatchGuard Fireware OS stack buffer overflow in iked","severity":"info","exploited":false,"published_at":"2026-08-28T02:16:21.07+00:00","url":"https://junglewise.ai/threats/cve-2026-19318-watchguard-fireware-os-stack-buffer-overflow-in-iked"},{"cve":"CVE-2026-19317","cvss":8.7,"epss":0.0032,"slug":"cve-2026-19317-watchguard-fireware-os-out-of-bounds-read-in-iked","title":"WatchGuard Fireware OS out-of-bounds read in iked","severity":"info","exploited":false,"published_at":"2026-08-28T02:16:20.947+00:00","url":"https://junglewise.ai/threats/cve-2026-19317-watchguard-fireware-os-out-of-bounds-read-in-iked"},{"cve":"CVE-2026-19316","cvss":8.7,"epss":0.0032,"slug":"cve-2026-19316-watchguard-fireware-os-double-free-in-iked-dos","title":"WatchGuard Fireware OS double-free in iked DoS","severity":"info","exploited":false,"published_at":"2026-08-28T02:16:20.827+00:00","url":"https://junglewise.ai/threats/cve-2026-19316-watchguard-fireware-os-double-free-in-iked-dos"},{"cve":"CVE-2026-19315","cvss":9.3,"epss":0.0046,"slug":"cve-2026-19315-watchguard-fireware-os-type-confusion-in-iked-remote-code","title":"WatchGuard Fireware OS type confusion in iked remote code execution","severity":"info","exploited":false,"published_at":"2026-08-28T02:16:20.703+00:00","url":"https://junglewise.ai/threats/cve-2026-19315-watchguard-fireware-os-type-confusion-in-iked-remote-code"},{"cve":"CVE-2026-19314","cvss":8.7,"epss":0.0032,"slug":"cve-2026-19314-watchguard-fireware-os-integer-underflow-in-iked","title":"WatchGuard Fireware OS integer underflow in iked","severity":"info","exploited":false,"published_at":"2026-08-28T02:16:20.58+00:00","url":"https://junglewise.ai/threats/cve-2026-19314-watchguard-fireware-os-integer-underflow-in-iked"},{"cve":"CVE-2026-19313","cvss":9.3,"epss":0.0047,"slug":"cve-2026-19313-watchguard-fireware-os-heap-overflow-in-iked","title":"WatchGuard Fireware OS heap overflow in iked","severity":"info","exploited":false,"published_at":"2026-08-28T02:16:20.45+00:00","url":"https://junglewise.ai/threats/cve-2026-19313-watchguard-fireware-os-heap-overflow-in-iked"},{"cve":"CVE-2026-13086","cvss":9.3,"epss":0.0044,"slug":"cve-2026-13086-watchguard-fireware-os-stack-buffer-overflow-in-mobile-security","title":"WatchGuard Fireware OS stack buffer overflow in Mobile Security epm","severity":"info","exploited":false,"published_at":"2026-08-28T02:16:20.197+00:00","url":"https://junglewise.ai/threats/cve-2026-13086-watchguard-fireware-os-stack-buffer-overflow-in-mobile-security"},{"cve":"CVE-2026-81851","cvss":6.9,"epss":0.0041,"slug":"cve-2026-81851-watchguard-fireware-os-heap-buffer-overflow-in-iked","title":"WatchGuard Fireware OS heap buffer overflow in iked","severity":"info","exploited":false,"published_at":"2026-08-28T00:18:22.687+00:00","url":"https://junglewise.ai/threats/cve-2026-81851-watchguard-fireware-os-heap-buffer-overflow-in-iked"},{"cve":"CVE-2026-8247","cvss":7.7,"slug":"cve-2026-8247-watchguard-fireware-os-out-of-bounds-write-in-admd","title":"WatchGuard Fireware OS out-of-bounds write in admd","severity":"info","exploited":false,"published_at":"2026-07-03T00:16:52.773+00:00","url":"https://junglewise.ai/threats/cve-2026-8247-watchguard-fireware-os-out-of-bounds-write-in-admd"},{"cve":"CVE-2026-13728","cvss":5.9,"slug":"cve-2026-13728-watchguard-fireware-os-hard-coded-encryption-key-in-firecluster","title":"WatchGuard Fireware OS hard-coded encryption key in FireCluster Access Portal","severity":"info","exploited":false,"published_at":"2026-07-03T00:16:52.147+00:00","url":"https://junglewise.ai/threats/cve-2026-13728-watchguard-fireware-os-hard-coded-encryption-key-in-firecluster"},{"cve":"CVE-2026-13722","cvss":8.6,"slug":"cve-2026-13722-watchguard-fireware-os-firmware-validation-bypass-in-backup","title":"WatchGuard Fireware OS firmware validation bypass in backup/restore feature","severity":"info","exploited":false,"published_at":"2026-07-03T00:16:52.01+00:00","url":"https://junglewise.ai/threats/cve-2026-13722-watchguard-fireware-os-firmware-validation-bypass-in-backup"},{"cve":"CVE-2026-13384","cvss":8.6,"slug":"cve-2026-13384-watchguard-fireware-os-out-of-bounds-write-in-wgagent","title":"WatchGuard Fireware OS out-of-bounds write in wgagent","severity":"info","exploited":false,"published_at":"2026-07-03T00:16:51.893+00:00","url":"https://junglewise.ai/threats/cve-2026-13384-watchguard-fireware-os-out-of-bounds-write-in-wgagent"},{"cve":"CVE-2026-13383","cvss":8.6,"slug":"cve-2026-13383-watchguard-fireware-os-out-of-bounds-write-in-ikestubd","title":"WatchGuard Fireware OS out-of-bounds write in ikestubd","severity":"info","exploited":false,"published_at":"2026-07-03T00:16:51.773+00:00","url":"https://junglewise.ai/threats/cve-2026-13383-watchguard-fireware-os-out-of-bounds-write-in-ikestubd"},{"cve":"CVE-2026-13377","cvss":4.8,"slug":"cve-2026-13377-watchguard-fireware-os-stored-xss-in-sip-proxy","title":"WatchGuard Fireware OS stored XSS in SIP Proxy","severity":"info","exploited":false,"published_at":"2026-07-03T00:16:51.643+00:00","url":"https://junglewise.ai/threats/cve-2026-13377-watchguard-fireware-os-stored-xss-in-sip-proxy"},{"cve":"CVE-2026-13376","cvss":4.8,"slug":"cve-2026-13376-watchguard-fireware-os-stored-xss-in-spamblocker-module","title":"WatchGuard Fireware OS stored XSS in spamBlocker module","severity":"info","exploited":false,"published_at":"2026-07-03T00:16:51.497+00:00","url":"https://junglewise.ai/threats/cve-2026-13376-watchguard-fireware-os-stored-xss-in-spamblocker-module"},{"cve":"CVE-2026-13375","cvss":4.8,"slug":"cve-2026-13375-watchguard-fireware-os-stored-xss-in-autotask-technology","title":"WatchGuard Fireware OS stored XSS in Autotask Technology Integration","severity":"info","exploited":false,"published_at":"2026-07-03T00:16:51.373+00:00","url":"https://junglewise.ai/threats/cve-2026-13375-watchguard-fireware-os-stored-xss-in-autotask-technology"},{"cve":"CVE-2026-13374","cvss":4.8,"slug":"cve-2026-13374-watchguard-fireware-os-stored-xss-in-connectwise-integration","title":"WatchGuard Fireware OS Stored XSS in ConnectWise Integration module","severity":"info","exploited":false,"published_at":"2026-07-03T00:16:51.257+00:00","url":"https://junglewise.ai/threats/cve-2026-13374-watchguard-fireware-os-stored-xss-in-connectwise-integration"},{"cve":"CVE-2026-13373","cvss":4.8,"slug":"cve-2026-13373-watchguard-fireware-os-stored-xss-in-tigerpaw-technology","title":"WatchGuard Fireware OS Stored XSS in Tigerpaw Technology Integration","severity":"info","exploited":false,"published_at":"2026-07-03T00:16:51.137+00:00","url":"https://junglewise.ai/threats/cve-2026-13373-watchguard-fireware-os-stored-xss-in-tigerpaw-technology"},{"cve":"CVE-2026-13371","cvss":6.9,"slug":"cve-2026-13371-watchguard-fireware-os-denial-of-service-in-management-web-ui","title":"WatchGuard Fireware OS denial of service in Management Web UI","severity":"info","exploited":false,"published_at":"2026-07-03T00:16:51.013+00:00","url":"https://junglewise.ai/threats/cve-2026-13371-watchguard-fireware-os-denial-of-service-in-management-web-ui"},{"cve":"CVE-2026-13368","cvss":9.2,"slug":"cve-2026-13368-watchguard-fireware-os-use-after-free-in-mobile-vpn-ikev2-ldap","title":"WatchGuard Fireware OS use-after-free in Mobile VPN IKEv2 LDAP auth","severity":"info","exploited":false,"published_at":"2026-07-03T00:16:50.89+00:00","url":"https://junglewise.ai/threats/cve-2026-13368-watchguard-fireware-os-use-after-free-in-mobile-vpn-ikev2-ldap"},{"cve":"CVE-2026-13084","cvss":8.7,"slug":"cve-2026-13084-watchguard-fireware-os-dos-via-null-pointer-dereference-in-iked","title":"WatchGuard Fireware OS DoS via NULL pointer dereference in iked","severity":"info","exploited":false,"published_at":"2026-07-03T00:16:50.767+00:00","url":"https://junglewise.ai/threats/cve-2026-13084-watchguard-fireware-os-dos-via-null-pointer-dereference-in-iked"}],"weekly":[{"week":"2026-06-29","critical":0,"exploited":0,"vulnerabilities":16},{"week":"2026-07-06","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-13","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-20","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-27","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-03","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-10","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-24","critical":0,"exploited":0,"vulnerabilities":12},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-07","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-14","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":0}],"related":[{"name":"Watchguard Dimension","slug":"dimension","vulnerabilities":16,"url":"https://junglewise.ai/threats/technologies/dimension"},{"name":"Watchguard Agent","slug":"agent","vulnerabilities":7,"url":"https://junglewise.ai/threats/technologies/agent"},{"name":"Watchguard Firebox","slug":"firebox","vulnerabilities":6,"url":"https://junglewise.ai/threats/technologies/firebox"},{"name":"Watchguard Fireware","slug":"fireware","vulnerabilities":5,"url":"https://junglewise.ai/threats/technologies/fireware"},{"name":"Watchguard XTM Appliances","slug":"xtm-appliances","vulnerabilities":4,"url":"https://junglewise.ai/threats/technologies/xtm-appliances"},{"name":"Watchguard Mobile VPN with SSL client","slug":"mobile-vpn-with-ssl-client","vulnerabilities":3,"url":"https://junglewise.ai/threats/technologies/mobile-vpn-with-ssl-client"},{"name":"Watchguard XTM","slug":"xtm","vulnerabilities":3,"url":"https://junglewise.ai/threats/technologies/xtm"}],"technology":{"hub":true,"name":"Watchguard Fireware OS","slug":"fireware-os","vendor":{"name":"Watchguard","slug":"watchguard","url":"https://junglewise.ai/threats/vendors/watchguard"},"aliases":[],"category":"operating-system","homepage":"https://www.watchguard.com/wgrd-products/firewall-appliances","description":"Fireware OS is the operating system designed for WatchGuard Firebox security appliances.","url":"https://junglewise.ai/threats/technologies/fireware-os"},"most_severe":[{"cve":"CVE-2025-9242","cvss":9.8,"epss":0.7349,"slug":"cve-2025-9242-watchguard-fireware-os-out-of-bounds-write-in-iked-process","title":"WatchGuard Fireware OS out-of-bounds write in iked process","severity":"critical","exploited":true,"published_at":"2025-11-12T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2025-9242-watchguard-fireware-os-out-of-bounds-write-in-iked-process"},{"cve":"CVE-2025-11838","cvss":7.5,"epss":0.005,"slug":"cve-2025-11838-watchguard-fireware-os-memory-corruption-dos-in-ikev2-vpn","title":"WatchGuard Fireware OS memory corruption DoS in IKEv2 VPN","severity":"high","exploited":false,"published_at":"2025-12-04T22:15:46.61+00:00","url":"https://junglewise.ai/threats/cve-2025-11838-watchguard-fireware-os-memory-corruption-dos-in-ikev2-vpn"},{"cve":"CVE-2025-1545","cvss":7.5,"epss":0.0048,"slug":"cve-2025-1545-watchguard-fireware-xpath-injection-in-web-cgi","title":"WatchGuard Fireware XPath injection in Web CGI","severity":"high","exploited":false,"published_at":"2025-12-04T22:15:48.29+00:00","url":"https://junglewise.ai/threats/cve-2025-1545-watchguard-fireware-xpath-injection-in-web-cgi"},{"cve":"CVE-2025-12195","cvss":7.2,"epss":0.0069,"slug":"cve-2025-12195-watchguard-fireware-os-out-of-bounds-write-in-cli","title":"WatchGuard Fireware OS out-of-bounds write in CLI","severity":"high","exploited":false,"published_at":"2025-12-04T22:15:46.92+00:00","url":"https://junglewise.ai/threats/cve-2025-12195-watchguard-fireware-os-out-of-bounds-write-in-cli"},{"cve":"CVE-2025-12196","cvss":7.2,"epss":0.0062,"slug":"cve-2025-12196-watchguard-fireware-os-out-of-bounds-write-in-cli-ping-command","title":"WatchGuard Fireware OS out-of-bounds write in CLI ping command","severity":"high","exploited":false,"published_at":"2025-12-04T22:15:47.06+00:00","url":"https://junglewise.ai/threats/cve-2025-12196-watchguard-fireware-os-out-of-bounds-write-in-cli-ping-command"},{"cve":"CVE-2025-12026","cvss":7.2,"epss":0.0044,"slug":"cve-2025-12026-watchguard-fireware-os-out-of-bounds-write-in-certd","title":"WatchGuard Fireware OS out-of-bounds write in certd","severity":"high","exploited":false,"published_at":"2025-12-04T22:15:46.777+00:00","url":"https://junglewise.ai/threats/cve-2025-12026-watchguard-fireware-os-out-of-bounds-write-in-certd"},{"cve":"CVE-2025-1547","cvss":7.2,"epss":0.0035,"slug":"cve-2025-1547-watchguard-fireware-os-stack-overflow-in-certificate-request","title":"WatchGuard Fireware OS stack overflow in certificate request command","severity":"high","exploited":false,"published_at":"2025-12-04T22:15:48.44+00:00","url":"https://junglewise.ai/threats/cve-2025-1547-watchguard-fireware-os-stack-overflow-in-certificate-request"},{"cve":"CVE-2026-4266","cvss":6.7,"epss":0.0039,"slug":"cve-2026-4266-watchguard-fireware-os-insecure-deserialization-in-access-portal","title":"WatchGuard Fireware OS insecure deserialization in Access Portal","severity":"medium","exploited":false,"published_at":"2026-03-30T13:16:22.573+00:00","url":"https://junglewise.ai/threats/cve-2026-4266-watchguard-fireware-os-insecure-deserialization-in-access-portal"},{"cve":"CVE-2026-4315","cvss":6.5,"epss":0.0024,"slug":"cve-2026-4315-watchguard-fireware-os-csrf-in-webui","title":"WatchGuard Fireware OS CSRF in WebUI","severity":"medium","exploited":false,"published_at":"2026-03-30T13:16:22.75+00:00","url":"https://junglewise.ai/threats/cve-2026-4315-watchguard-fireware-os-csrf-in-webui"},{"cve":"CVE-2026-3343","cvss":6.1,"epss":0.0032,"slug":"cve-2026-3343-watchguard-fireware-os-reflected-xss-in-web-ui","title":"WatchGuard Fireware OS reflected XSS in Web UI","severity":"medium","exploited":false,"published_at":"2026-03-03T14:15:57.687+00:00","url":"https://junglewise.ai/threats/cve-2026-3343-watchguard-fireware-os-reflected-xss-in-web-ui"}],"generated_at":"2026-09-26T09:11:00.170868+00:00"}