{"schema_version":1,"title":"Watchguard vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 77 vulnerabilities in Watchguard: 1 in the last 7 days and 48 in the last 90 days, 4 of them critical and 4 exploited in the wild. The most recent, CVE-2026-95676, was published on 23 September 2026. 8 technologies have a page of their own.","url":"https://junglewise.ai/threats/vendors/watchguard","json_url":"https://junglewise.ai/threats/vendors/watchguard.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/vendors/watchguard","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"vendor","counts":{"high":9,"all_time":77,"critical":4,"exploited":4,"last_7_days":1,"last_30_days":29,"last_90_days":48,"last_365_days":75},"latest":[{"cve":"CVE-2026-95676","epss":0.005,"slug":"cve-2026-95676-a-missing-improper-authentication-vulnerability-in-the-watchguard","title":"WatchGuard AuthPoint Gateway authentication bypass in LDAP Sync","severity":"info","exploited":false,"published_at":"2026-09-23T13:17:32.143+00:00","url":"https://junglewise.ai/threats/cve-2026-95676-a-missing-improper-authentication-vulnerability-in-the-watchguard"},{"cve":"CVE-2026-78618","cvss":6.9,"epss":0.0043,"slug":"cve-2026-78618-watchguard-dimension-business-logic-flaw-in-backend-operations","title":"WatchGuard Dimension business logic flaw in backend operations","severity":"info","exploited":false,"published_at":"2026-08-28T02:16:24.58+00:00","url":"https://junglewise.ai/threats/cve-2026-78618-watchguard-dimension-business-logic-flaw-in-backend-operations"},{"cve":"CVE-2026-78617","cvss":6.3,"epss":0.0042,"slug":"cve-2026-78617-watchguard-dimension-missing-rate-limiting-on-web-login","title":"WatchGuard Dimension missing rate-limiting on web login","severity":"info","exploited":false,"published_at":"2026-08-28T02:16:24.45+00:00","url":"https://junglewise.ai/threats/cve-2026-78617-watchguard-dimension-missing-rate-limiting-on-web-login"},{"cve":"CVE-2026-78616","cvss":4.8,"epss":0.003,"slug":"cve-2026-78616-watchguard-dimension-stored-xss-in-trusted-ca-certificate","title":"WatchGuard Dimension stored XSS in Trusted CA certificate configuration","severity":"info","exploited":false,"published_at":"2026-08-28T02:16:24.317+00:00","url":"https://junglewise.ai/threats/cve-2026-78616-watchguard-dimension-stored-xss-in-trusted-ca-certificate"},{"cve":"CVE-2026-78615","cvss":4.6,"epss":0.0047,"slug":"cve-2026-78615-watchguard-dimension-reflected-xss-in-report-detail-page","title":"WatchGuard Dimension reflected XSS in report detail page","severity":"info","exploited":false,"published_at":"2026-08-28T02:16:24.19+00:00","url":"https://junglewise.ai/threats/cve-2026-78615-watchguard-dimension-reflected-xss-in-report-detail-page"},{"cve":"CVE-2026-78614","cvss":8.6,"epss":0.0071,"slug":"cve-2026-78614-watchguard-dimension-sql-injection-in-audit-report-feature","title":"WatchGuard Dimension SQL injection in audit report feature","severity":"info","exploited":false,"published_at":"2026-08-28T02:16:24.07+00:00","url":"https://junglewise.ai/threats/cve-2026-78614-watchguard-dimension-sql-injection-in-audit-report-feature"},{"cve":"CVE-2026-78613","cvss":8.6,"epss":0.0062,"slug":"cve-2026-78613-watchguard-dimension-sql-injection-in-log-viewer","title":"WatchGuard Dimension SQL injection in log viewer","severity":"info","exploited":false,"published_at":"2026-08-28T02:16:23.943+00:00","url":"https://junglewise.ai/threats/cve-2026-78613-watchguard-dimension-sql-injection-in-log-viewer"},{"cve":"CVE-2026-78612","cvss":8.6,"epss":0.0071,"slug":"cve-2026-78612-watchguard-dimension-sql-injection-in-scheduled-report-feature","title":"WatchGuard Dimension SQL injection in scheduled report feature","severity":"info","exploited":false,"published_at":"2026-08-28T02:16:23.807+00:00","url":"https://junglewise.ai/threats/cve-2026-78612-watchguard-dimension-sql-injection-in-scheduled-report-feature"},{"cve":"CVE-2026-78610","cvss":8.4,"epss":0.0023,"slug":"cve-2026-78610-watchguard-dimension-cross-site-request-forgery-in-administrator","title":"WatchGuard Dimension cross-site request forgery in administrator passphrase change","severity":"info","exploited":false,"published_at":"2026-08-28T02:16:23.687+00:00","url":"https://junglewise.ai/threats/cve-2026-78610-watchguard-dimension-cross-site-request-forgery-in-administrator"},{"cve":"CVE-2026-78500","cvss":5.1,"epss":0.0044,"slug":"cve-2026-78500-watchguard-dimension-blind-ssrf-in-database-test-connection","title":"WatchGuard Dimension blind SSRF in database test connection","severity":"info","exploited":false,"published_at":"2026-08-28T02:16:23.56+00:00","url":"https://junglewise.ai/threats/cve-2026-78500-watchguard-dimension-blind-ssrf-in-database-test-connection"},{"cve":"CVE-2026-78499","cvss":5.1,"epss":0.0044,"slug":"cve-2026-78499-watchguard-dimension-server-side-request-forgery-via-ftp-server","title":"WatchGuard Dimension server-side request forgery via FTP server test","severity":"info","exploited":false,"published_at":"2026-08-28T02:16:23.443+00:00","url":"https://junglewise.ai/threats/cve-2026-78499-watchguard-dimension-server-side-request-forgery-via-ftp-server"},{"cve":"CVE-2026-78498","cvss":5.1,"epss":0.0044,"slug":"cve-2026-78498-watchguard-dimension-server-side-request-forgery-in-email-server","title":"WatchGuard Dimension server-side request forgery in email server test","severity":"info","exploited":false,"published_at":"2026-08-28T02:16:23.317+00:00","url":"https://junglewise.ai/threats/cve-2026-78498-watchguard-dimension-server-side-request-forgery-in-email-server"},{"cve":"CVE-2026-78495","cvss":5.3,"epss":0.0039,"slug":"cve-2026-78495-watchguard-dimension-server-side-request-forgery-in-remote-backup","title":"WatchGuard Dimension server-side request forgery in Remote Backup Connection Test","severity":"info","exploited":false,"published_at":"2026-08-28T02:16:23.197+00:00","url":"https://junglewise.ai/threats/cve-2026-78495-watchguard-dimension-server-side-request-forgery-in-remote-backup"},{"cve":"CVE-2026-78174","cvss":9.3,"epss":0.0043,"slug":"cve-2026-78174-watchguard-dimension-exposure-of-session-tokens-in-diagnostic","title":"WatchGuard Dimension exposure of session tokens in diagnostic logs","severity":"info","exploited":false,"published_at":"2026-08-28T02:16:22.95+00:00","url":"https://junglewise.ai/threats/cve-2026-78174-watchguard-dimension-exposure-of-session-tokens-in-diagnostic"},{"cve":"CVE-2026-78103","cvss":5.1,"epss":0.0049,"slug":"cve-2026-78103-watchguard-dimension-configuration-lock-bypass","title":"WatchGuard Dimension configuration lock bypass","severity":"info","exploited":false,"published_at":"2026-08-28T02:16:22.83+00:00","url":"https://junglewise.ai/threats/cve-2026-78103-watchguard-dimension-configuration-lock-bypass"},{"cve":"CVE-2026-78047","cvss":5.1,"epss":0.0044,"slug":"cve-2026-78047-watchguard-dimension-stored-xss-in-task-scheduling","title":"WatchGuard Dimension stored XSS in task scheduling","severity":"info","exploited":false,"published_at":"2026-08-28T02:16:22.697+00:00","url":"https://junglewise.ai/threats/cve-2026-78047-watchguard-dimension-stored-xss-in-task-scheduling"},{"cve":"CVE-2026-78011","cvss":8.7,"epss":0.0054,"slug":"cve-2026-78011-watchguard-fireware-os-integer-underflow-in-iked","title":"WatchGuard Fireware OS integer underflow in iked","severity":"info","exploited":false,"published_at":"2026-08-28T02:16:22.563+00:00","url":"https://junglewise.ai/threats/cve-2026-78011-watchguard-fireware-os-integer-underflow-in-iked"},{"cve":"CVE-2026-78010","cvss":8.7,"epss":0.0054,"slug":"cve-2026-78010-watchguard-fireware-os-stack-based-buffer-overflow-in-iked","title":"WatchGuard Fireware OS stack-based buffer overflow in iked","severity":"info","exploited":false,"published_at":"2026-08-28T02:16:22.417+00:00","url":"https://junglewise.ai/threats/cve-2026-78010-watchguard-fireware-os-stack-based-buffer-overflow-in-iked"},{"cve":"CVE-2026-78009","cvss":8.7,"epss":0.0054,"slug":"cve-2026-78009-watchguard-fireware-os-out-of-bounds-read-in-iked","title":"WatchGuard Fireware OS out-of-bounds read in iked","severity":"info","exploited":false,"published_at":"2026-08-28T02:16:22.293+00:00","url":"https://junglewise.ai/threats/cve-2026-78009-watchguard-fireware-os-out-of-bounds-read-in-iked"},{"cve":"CVE-2026-78008","cvss":8.6,"epss":0.0061,"slug":"cve-2026-78008-watchguard-fireware-os-buffer-overflow-in-wgagent","title":"WatchGuard Fireware OS buffer overflow in wgagent","severity":"info","exploited":false,"published_at":"2026-08-28T02:16:22.167+00:00","url":"https://junglewise.ai/threats/cve-2026-78008-watchguard-fireware-os-buffer-overflow-in-wgagent"},{"cve":"CVE-2026-19318","cvss":9.3,"epss":0.0047,"slug":"cve-2026-19318-watchguard-fireware-os-stack-buffer-overflow-in-iked","title":"WatchGuard Fireware OS stack buffer overflow in iked","severity":"info","exploited":false,"published_at":"2026-08-28T02:16:21.07+00:00","url":"https://junglewise.ai/threats/cve-2026-19318-watchguard-fireware-os-stack-buffer-overflow-in-iked"},{"cve":"CVE-2026-19317","cvss":8.7,"epss":0.0032,"slug":"cve-2026-19317-watchguard-fireware-os-out-of-bounds-read-in-iked","title":"WatchGuard Fireware OS out-of-bounds read in iked","severity":"info","exploited":false,"published_at":"2026-08-28T02:16:20.947+00:00","url":"https://junglewise.ai/threats/cve-2026-19317-watchguard-fireware-os-out-of-bounds-read-in-iked"},{"cve":"CVE-2026-19316","cvss":8.7,"epss":0.0032,"slug":"cve-2026-19316-watchguard-fireware-os-double-free-in-iked-dos","title":"WatchGuard Fireware OS double-free in iked DoS","severity":"info","exploited":false,"published_at":"2026-08-28T02:16:20.827+00:00","url":"https://junglewise.ai/threats/cve-2026-19316-watchguard-fireware-os-double-free-in-iked-dos"},{"cve":"CVE-2026-19315","cvss":9.3,"epss":0.0046,"slug":"cve-2026-19315-watchguard-fireware-os-type-confusion-in-iked-remote-code","title":"WatchGuard Fireware OS type confusion in iked remote code execution","severity":"info","exploited":false,"published_at":"2026-08-28T02:16:20.703+00:00","url":"https://junglewise.ai/threats/cve-2026-19315-watchguard-fireware-os-type-confusion-in-iked-remote-code"},{"cve":"CVE-2026-19314","cvss":8.7,"epss":0.0032,"slug":"cve-2026-19314-watchguard-fireware-os-integer-underflow-in-iked","title":"WatchGuard Fireware OS integer underflow in iked","severity":"info","exploited":false,"published_at":"2026-08-28T02:16:20.58+00:00","url":"https://junglewise.ai/threats/cve-2026-19314-watchguard-fireware-os-integer-underflow-in-iked"}],"vendor":{"hub":true,"name":"Watchguard","slug":"watchguard","homepage":"https://www.watchguard.com/","description":"A provider of network security appliances, secure Wi-Fi, and multi-factor authentication products.","url":"https://junglewise.ai/threats/vendors/watchguard"},"weekly":[{"week":"2026-06-29","critical":0,"exploited":0,"vulnerabilities":17},{"week":"2026-07-06","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-13","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-20","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-27","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-03","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-10","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-24","critical":0,"exploited":0,"vulnerabilities":30},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-07","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-14","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":1}],"most_severe":[{"cve":"CVE-2025-9242","cvss":9.8,"epss":0.7349,"slug":"cve-2025-9242-watchguard-fireware-os-out-of-bounds-write-in-iked-process","title":"WatchGuard Fireware OS out-of-bounds write in iked process","severity":"critical","exploited":true,"published_at":"2025-11-12T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2025-9242-watchguard-fireware-os-out-of-bounds-write-in-iked-process"},{"cve":"CVE-2025-14733","cvss":9.8,"epss":0.2651,"slug":"cve-2025-14733-watchguard-fireware-os-out-of-bounds-write-in-iked-process","title":"An Out-of-bounds Write vulnerability in the WatchGuard Fireware OS iked process may allow a remote unauthenticated attacker to execute arbit","severity":"critical","exploited":true,"published_at":"2025-12-19T01:16:05.53+00:00","url":"https://junglewise.ai/threats/cve-2025-14733-watchguard-fireware-os-out-of-bounds-write-in-iked-process"},{"cve":"CVE-2022-26318","cvss":9.8,"slug":"cve-2022-26318-watchguard-firebox-and-xtm-appliances-arbitrary-code-execution","title":"WatchGuard Firebox and XTM Appliances Arbitrary Code Execution","severity":"critical","exploited":true,"published_at":"2022-03-25T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2022-26318-watchguard-firebox-and-xtm-appliances-arbitrary-code-execution"},{"cve":"CVE-2022-23176","cvss":8.8,"slug":"cve-2022-23176-watchguard-firebox-and-xtm-privilege-escalation-vulnerability","title":"WatchGuard Firebox and XTM Privilege Escalation Vulnerability","severity":"critical","exploited":true,"published_at":"2022-04-11T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2022-23176-watchguard-firebox-and-xtm-privilege-escalation-vulnerability"},{"cve":"CVE-2026-6788","cvss":7.8,"slug":"cve-2026-6788-watchguard-agent-uncontrolled-search-path-in-windows","title":"WatchGuard Agent uncontrolled search path in Windows","severity":"high","exploited":false,"published_at":"2026-05-06T16:16:11.78+00:00","url":"https://junglewise.ai/threats/cve-2026-6788-watchguard-agent-uncontrolled-search-path-in-windows"},{"cve":"CVE-2026-6787","cvss":7.8,"slug":"cve-2026-6787-watchguard-agent-hard-coded-cryptographic-key-in-windows-agent","title":"WatchGuard Agent hard-coded cryptographic key in Windows agent","severity":"high","exploited":false,"published_at":"2026-05-06T16:16:11.643+00:00","url":"https://junglewise.ai/threats/cve-2026-6787-watchguard-agent-hard-coded-cryptographic-key-in-windows-agent"},{"cve":"CVE-2026-41288","cvss":7.8,"slug":"cve-2026-41288-watchguard-agent-privilege-escalation-in-patch-management","title":"WatchGuard Agent privilege escalation in patch management component","severity":"high","exploited":false,"published_at":"2026-05-06T16:16:10.147+00:00","url":"https://junglewise.ai/threats/cve-2026-41288-watchguard-agent-privilege-escalation-in-patch-management"},{"cve":"CVE-2025-11838","cvss":7.5,"epss":0.005,"slug":"cve-2025-11838-watchguard-fireware-os-memory-corruption-dos-in-ikev2-vpn","title":"WatchGuard Fireware OS memory corruption DoS in IKEv2 VPN","severity":"high","exploited":false,"published_at":"2025-12-04T22:15:46.61+00:00","url":"https://junglewise.ai/threats/cve-2025-11838-watchguard-fireware-os-memory-corruption-dos-in-ikev2-vpn"},{"cve":"CVE-2025-1545","cvss":7.5,"epss":0.0048,"slug":"cve-2025-1545-watchguard-fireware-xpath-injection-in-web-cgi","title":"WatchGuard Fireware XPath injection in Web CGI","severity":"high","exploited":false,"published_at":"2025-12-04T22:15:48.29+00:00","url":"https://junglewise.ai/threats/cve-2025-1545-watchguard-fireware-xpath-injection-in-web-cgi"},{"cve":"CVE-2025-12195","cvss":7.2,"epss":0.0069,"slug":"cve-2025-12195-watchguard-fireware-os-out-of-bounds-write-in-cli","title":"WatchGuard Fireware OS out-of-bounds write in CLI","severity":"high","exploited":false,"published_at":"2025-12-04T22:15:46.92+00:00","url":"https://junglewise.ai/threats/cve-2025-12195-watchguard-fireware-os-out-of-bounds-write-in-cli"}],"generated_at":"2026-09-26T12:07:00.15149+00:00","technologies":[{"name":"Watchguard Fireware OS","slug":"fireware-os","vulnerabilities":45,"url":"https://junglewise.ai/threats/technologies/fireware-os"},{"name":"Watchguard Dimension","slug":"dimension","vulnerabilities":16,"url":"https://junglewise.ai/threats/technologies/dimension"},{"name":"Watchguard Agent","slug":"agent","vulnerabilities":7,"url":"https://junglewise.ai/threats/technologies/agent"},{"name":"Watchguard Firebox","slug":"firebox","vulnerabilities":6,"url":"https://junglewise.ai/threats/technologies/firebox"},{"name":"Watchguard Fireware","slug":"fireware","vulnerabilities":5,"url":"https://junglewise.ai/threats/technologies/fireware"},{"name":"Watchguard XTM Appliances","slug":"xtm-appliances","vulnerabilities":4,"url":"https://junglewise.ai/threats/technologies/xtm-appliances"},{"name":"Watchguard Mobile VPN with SSL client","slug":"mobile-vpn-with-ssl-client","vulnerabilities":3,"url":"https://junglewise.ai/threats/technologies/mobile-vpn-with-ssl-client"},{"name":"Watchguard XTM","slug":"xtm","vulnerabilities":3,"url":"https://junglewise.ai/threats/technologies/xtm"}]}