# Watchguard Fireware OS vulnerabilities Source: https://junglewise.ai/threats/technologies/fireware-os Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats Updated: 12 November 2026, 03:07 UTC. Rebuilt every hour. Data: https://junglewise.ai/threats/technologies/fireware-os.json License: CC BY 4.0 with a link back Junglewise Threat Intelligence has tracked 76 vulnerabilities in Watchguard Fireware OS: 0 in the last 7 days and 43 in the last 90 days, 1 of them critical and 1 exploited in the wild. The most recent, CVE-2026-93866, was published on 27 October 2026. 17 vulnerabilities in the last four weeks, up 21% on the four before (14). ## Counts - Last 7 days: 0 - Last 30 days: 17 - Last 90 days: 43 - All time: 76 (1 critical, 1 exploited in the wild) ## About Watchguard Fireware OS Operating system for Watchguard network security appliances. ## Latest Watchguard Fireware OS vulnerabilities - [CVE-2026-93866: WatchGuard Fireware OS integer overflow in WebSocket Access Portal](https://junglewise.ai/threats/cve-2026-93866-an-integer-overflow-vulnerability-in-the-websocket-connection) (info, published 27 Oct 2026) - [CVE-2026-93865: WatchGuard Fireware OS authentication bypass in FireCluster daemon](https://junglewise.ai/threats/cve-2026-93865-a-missing-authentication-vulnerability-in-the-fireware-os) (info, published 27 Oct 2026) - [CVE-2026-93864: WatchGuard Fireware OS arbitrary file overwrite via link following](https://junglewise.ai/threats/cve-2026-93864-a-link-following-vulnerability-in-watchguard-fireware-os-s) (info, published 27 Oct 2026) - [CVE-2026-93862: WatchGuard Fireware OS out-of-bounds read in FireCluster Sync](https://junglewise.ai/threats/cve-2026-93862-an-out-of-bounds-read-vulnerability-in-the-firecluster-sync) (info, published 27 Oct 2026) - [CVE-2026-93857: WatchGuard Fireware OS stack buffer overflow in SIP proxy](https://junglewise.ai/threats/cve-2026-93857-a-stack-based-buffer-overflow-vulnerability-in-fireware-os-s-sip) (info, published 27 Oct 2026) - [CVE-2026-93434: WatchGuard Fireware OS XPath injection in SSH authentication](https://junglewise.ai/threats/cve-2026-93434-an-xpath-injection-vulnerability-in-watchguard-fireware-os-s-ssh) (info, published 27 Oct 2026) - [CVE-2026-90465: WatchGuard Fireware OS missing authentication in FireCluster Sync](https://junglewise.ai/threats/cve-2026-90465-a-missing-authentication-vulnerability-in-the-firecluster-sync) (info, published 27 Oct 2026) - [CVE-2026-90464: WatchGuard Fireware OS path traversal in diagnostic command](https://junglewise.ai/threats/cve-2026-90464-an-external-control-of-file-path-vulnerability-in-a-watchguard) (info, published 27 Oct 2026) - [CVE-2026-90442: WatchGuard Fireware OS stack buffer overflow in certd](https://junglewise.ai/threats/cve-2026-90442-a-stack-based-buffer-overflow-vulnerability-in-the-fireware-os) (info, published 27 Oct 2026) - [CVE-2026-82332: WatchGuard Fireware OS improper authentication in AuthPoint MFA](https://junglewise.ai/threats/cve-2026-82332-an-improper-authentication-vulnerability-in-watchguard-fireware) (info, published 27 Oct 2026) - [CVE-2026-113881: WatchGuard Fireware OS stack buffer overflow in VPN Network Access Enforcement](https://junglewise.ai/threats/cve-2026-113881-a-stack-based-buffer-overflow-vulnerability-in-fireware-os-s-vpn) (info, published 27 Oct 2026) - [CVE-2026-112710: WatchGuard Fireware OS heap overflow in AD authentication service](https://junglewise.ai/threats/cve-2026-112710-a-heap-based-buffer-overflow-vulnerability-exists-in-the) (info, published 27 Oct 2026) - [CVE-2026-112709: WatchGuard Fireware OS heap buffer overflow in AD authentication](https://junglewise.ai/threats/cve-2026-112709-a-heap-based-buffer-overflow-vulnerability-in-the-fireware-os) (info, published 27 Oct 2026) - [CVE-2026-111107: WatchGuard Fireware OS NULL pointer dereference in management interface](https://junglewise.ai/threats/cve-2026-111107-a-null-pointer-dereference-vulnerability-in-watchguard-fireware) (info, published 27 Oct 2026) - [CVE-2026-104381: WatchGuard Fireware OS missing authentication in FireCluster state sync](https://junglewise.ai/threats/cve-2026-104381-a-missing-authentication-vulnerability-in-fireware-os-s) (info, published 27 Oct 2026) - [CVE-2026-103594: WatchGuard Fireware OS stack buffer overflow in WireGuard configuration](https://junglewise.ai/threats/cve-2026-103594-a-stack-based-buffer-overflow-vulnerability-in-fireware-os-s) (info, published 27 Oct 2026) - [CVE-2026-103593: WatchGuard Fireware OS stack buffer overflow in logging service](https://junglewise.ai/threats/cve-2026-103593-a-stack-based-buffer-overflow-vulnerability-in-the-fireware-os) (info, published 27 Oct 2026) - [CVE-2026-86134: WatchGuard Fireware OS NULL pointer dereference in authentication](https://junglewise.ai/threats/cve-2026-86134-a-null-pointer-dereference-vulnerability-in-the-watchguard) (info, published 30 Sep 2026) - [CVE-2026-90441: WatchGuard Fireware OS missing authorization in wgagent management API](https://junglewise.ai/threats/cve-2026-90441-a-missing-authorization-vulnerability-in-the-wgagent-management) (info, published 30 Sep 2026) - [CVE-2026-86136: WatchGuard Fireware OS missing authorization in wgagent management API](https://junglewise.ai/threats/cve-2026-86136-a-missing-authorization-vulnerability-in-the-wgagent-management) (info, published 30 Sep 2026) - [CVE-2026-86133: WatchGuard Fireware OS integer underflow in IKE daemon](https://junglewise.ai/threats/cve-2026-86133-an-integer-underflow-vulnerability-in-the-watchguard-fireware-os) (info, published 30 Sep 2026) - [CVE-2026-86132: WatchGuard Fireware OS integer underflow in IKEv2 daemon](https://junglewise.ai/threats/cve-2026-86132-an-integer-underflow-vulnerability-in-the-watchguard-fireware-os) (info, published 30 Sep 2026) - [CVE-2026-86131: WatchGuard Fireware OS code injection in BOVPN over TLS client](https://junglewise.ai/threats/cve-2026-86131-a-code-injection-vulnerability-in-watchguard-fireware-os-s-bovpn) (info, published 30 Sep 2026) - [CVE-2026-86128: WatchGuard Fireware OS NULL pointer dereference in NetFlow IPv6 processing](https://junglewise.ai/threats/cve-2026-86128-a-null-pointer-dereference-vulnerability-in-fireware-os-s-netflow) (info, published 30 Sep 2026) - [CVE-2026-86105: WatchGuard Fireware OS improper authorization in Access Portal reverse proxy](https://junglewise.ai/threats/cve-2026-86105-an-improper-authorization-vulnerability-in-fireware-os-s-access) (info, published 30 Sep 2026) ## Most severe Watchguard Fireware OS vulnerabilities - [CVE-2025-9242: WatchGuard Fireware OS out-of-bounds write in iked process](https://junglewise.ai/threats/cve-2025-9242-watchguard-fireware-os-out-of-bounds-write-in-iked-process) (critical, exploited in the wild, CVSS 9.8, published 12 Nov 2025) - [CVE-2025-11838: WatchGuard Fireware OS memory corruption DoS in IKEv2 VPN](https://junglewise.ai/threats/cve-2025-11838-watchguard-fireware-os-memory-corruption-dos-in-ikev2-vpn) (high, CVSS 7.5, published 4 Dec 2025) - [CVE-2025-1545: WatchGuard Fireware XPath injection in Web CGI](https://junglewise.ai/threats/cve-2025-1545-watchguard-fireware-xpath-injection-in-web-cgi) (high, CVSS 7.5, published 4 Dec 2025) - [CVE-2025-12195: WatchGuard Fireware OS out-of-bounds write in CLI](https://junglewise.ai/threats/cve-2025-12195-watchguard-fireware-os-out-of-bounds-write-in-cli) (high, CVSS 7.2, published 4 Dec 2025) - [CVE-2025-12196: WatchGuard Fireware OS out-of-bounds write in CLI ping command](https://junglewise.ai/threats/cve-2025-12196-watchguard-fireware-os-out-of-bounds-write-in-cli-ping-command) (high, CVSS 7.2, published 4 Dec 2025) - [CVE-2025-12026: WatchGuard Fireware OS out-of-bounds write in certd](https://junglewise.ai/threats/cve-2025-12026-watchguard-fireware-os-out-of-bounds-write-in-certd) (high, CVSS 7.2, published 4 Dec 2025) - [CVE-2025-1547: WatchGuard Fireware OS stack overflow in certificate request command](https://junglewise.ai/threats/cve-2025-1547-watchguard-fireware-os-stack-overflow-in-certificate-request) (high, CVSS 7.2, published 4 Dec 2025) - [CVE-2026-4266: WatchGuard Fireware OS insecure deserialization in Access Portal](https://junglewise.ai/threats/cve-2026-4266-watchguard-fireware-os-insecure-deserialization-in-access-portal) (medium, CVSS 6.7, published 30 Mar 2026) - [CVE-2026-4315: WatchGuard Fireware OS CSRF in WebUI](https://junglewise.ai/threats/cve-2026-4315-watchguard-fireware-os-csrf-in-webui) (medium, CVSS 6.5, published 30 Mar 2026) - [CVE-2026-3343: WatchGuard Fireware OS reflected XSS in Web UI](https://junglewise.ai/threats/cve-2026-3343-watchguard-fireware-os-reflected-xss-in-web-ui) (medium, CVSS 6.1, published 3 Mar 2026) ## Vulnerabilities per week 17 vulnerabilities in the last four weeks, up 21% on the four before (14). | Week of | Vulns | Critical | Exploited | | --- | --- | --- | --- | | 17 Aug 2026 | 0 | 0 | 0 | | 24 Aug 2026 | 12 | 0 | 0 | | 31 Aug 2026 | 0 | 0 | 0 | | 7 Sep 2026 | 0 | 0 | 0 | | 14 Sep 2026 | 0 | 0 | 0 | | 21 Sep 2026 | 0 | 0 | 0 | | 28 Sep 2026 | 14 | 0 | 0 | | 5 Oct 2026 | 0 | 0 | 0 | | 12 Oct 2026 | 0 | 0 | 0 | | 19 Oct 2026 | 0 | 0 | 0 | | 26 Oct 2026 | 17 | 0 | 0 | | 2 Nov 2026 | 0 | 0 | 0 | | 9 Nov 2026 | 0 | 0 | 0 | ## Other Watchguard technologies - [Watchguard Dimension](https://junglewise.ai/threats/technologies/dimension): 16 vulnerabilities - [Watchguard Agent](https://junglewise.ai/threats/technologies/agent): 8 vulnerabilities - [Watchguard Firebox](https://junglewise.ai/threats/technologies/firebox): 6 vulnerabilities - [Watchguard Fireware](https://junglewise.ai/threats/technologies/fireware): 6 vulnerabilities - [Watchguard AuthPoint Authentication Gateway](https://junglewise.ai/threats/technologies/authpoint-authentication-gateway): 5 vulnerabilities - [Watchguard XTM Appliances](https://junglewise.ai/threats/technologies/xtm-appliances): 4 vulnerabilities - [Watchguard Mobile VPN with SSL client](https://junglewise.ai/threats/technologies/mobile-vpn-with-ssl-client): 3 vulnerabilities - [Watchguard XTM](https://junglewise.ai/threats/technologies/xtm): 3 vulnerabilities ## Sources NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories. Rebuilt every hour. Cite as: Junglewise Threat Intelligence, "Watchguard Fireware OS vulnerabilities", https://junglewise.ai/threats/technologies/fireware-os, 12 November 2026.