# Watchguard vulnerabilities Source: https://junglewise.ai/threats/vendors/watchguard Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats Updated: 12 November 2026, 03:07 UTC. Rebuilt every hour. Data: https://junglewise.ai/threats/vendors/watchguard.json License: CC BY 4.0 with a link back Junglewise Threat Intelligence has tracked 121 vulnerabilities in Watchguard: 1 in the last 7 days and 74 in the last 90 days, 4 of them critical and 4 exploited in the wild. The most recent, CVE-2026-57907, was published on 10 November 2026. 24 vulnerabilities in the last four weeks, up 26% on the four before (19). 9 technologies have a page of their own. ## Counts - Last 7 days: 1 - Last 30 days: 25 - Last 90 days: 74 - All time: 121 (4 critical, 4 exploited in the wild) ## About Watchguard A provider of network security appliances, secure Wi-Fi, and multi-factor authentication products. ## Latest Watchguard vulnerabilities - [CVE-2026-57907: WatchGuard Endpoint Protection privilege escalation in inter-process communication](https://junglewise.ai/threats/cve-2026-57907-a-privilege-escalation-vulnerability-in-watchguard-endpoint) (info, published 10 Nov 2026) - [CVE-2026-121640: WatchGuard AuthPoint Gateway authentication bypass by capture-replay](https://junglewise.ai/threats/cve-2026-121640-an-authentication-bypass-by-capture-replay-vulnerability-in) (info, published 4 Nov 2026) - [CVE-2026-121639: WatchGuard AuthPoint Gateway authentication bypass](https://junglewise.ai/threats/cve-2026-121639-a-missing-authentication-for-critical-function-vulnerability-in) (info, published 4 Nov 2026) - [CVE-2026-121638: WatchGuard AuthPoint Gateway improper certificate validation](https://junglewise.ai/threats/cve-2026-121638-an-improper-certificate-validation-vulnerability-in-watchguard) (info, published 4 Nov 2026) - [CVE-2026-121637: WatchGuard AuthPoint Gateway improper HMAC validation in LDAP authentication](https://junglewise.ai/threats/cve-2026-121637-an-improper-integrity-validation-vulnerability-in-watchguard) (info, published 4 Nov 2026) - [CVE-2026-93866: WatchGuard Fireware OS integer overflow in WebSocket Access Portal](https://junglewise.ai/threats/cve-2026-93866-an-integer-overflow-vulnerability-in-the-websocket-connection) (info, published 27 Oct 2026) - [CVE-2026-93865: WatchGuard Fireware OS authentication bypass in FireCluster daemon](https://junglewise.ai/threats/cve-2026-93865-a-missing-authentication-vulnerability-in-the-fireware-os) (info, published 27 Oct 2026) - [CVE-2026-93864: WatchGuard Fireware OS arbitrary file overwrite via link following](https://junglewise.ai/threats/cve-2026-93864-a-link-following-vulnerability-in-watchguard-fireware-os-s) (info, published 27 Oct 2026) - [CVE-2026-93862: WatchGuard Fireware OS out-of-bounds read in FireCluster Sync](https://junglewise.ai/threats/cve-2026-93862-an-out-of-bounds-read-vulnerability-in-the-firecluster-sync) (info, published 27 Oct 2026) - [CVE-2026-93857: WatchGuard Fireware OS stack buffer overflow in SIP proxy](https://junglewise.ai/threats/cve-2026-93857-a-stack-based-buffer-overflow-vulnerability-in-fireware-os-s-sip) (info, published 27 Oct 2026) - [CVE-2026-93434: WatchGuard Fireware OS XPath injection in SSH authentication](https://junglewise.ai/threats/cve-2026-93434-an-xpath-injection-vulnerability-in-watchguard-fireware-os-s-ssh) (info, published 27 Oct 2026) - [CVE-2026-90465: WatchGuard Fireware OS missing authentication in FireCluster Sync](https://junglewise.ai/threats/cve-2026-90465-a-missing-authentication-vulnerability-in-the-firecluster-sync) (info, published 27 Oct 2026) - [CVE-2026-90464: WatchGuard Fireware OS path traversal in diagnostic command](https://junglewise.ai/threats/cve-2026-90464-an-external-control-of-file-path-vulnerability-in-a-watchguard) (info, published 27 Oct 2026) - [CVE-2026-90442: WatchGuard Fireware OS stack buffer overflow in certd](https://junglewise.ai/threats/cve-2026-90442-a-stack-based-buffer-overflow-vulnerability-in-the-fireware-os) (info, published 27 Oct 2026) - [CVE-2026-82332: WatchGuard Fireware OS improper authentication in AuthPoint MFA](https://junglewise.ai/threats/cve-2026-82332-an-improper-authentication-vulnerability-in-watchguard-fireware) (info, published 27 Oct 2026) - [CVE-2026-115495: WatchGuard Mobile VPN with SSL cleartext transmission of credentials](https://junglewise.ai/threats/cve-2026-115495-cleartext-transmission-of-sensitive-information-vulnerability-in) (info, published 27 Oct 2026) - [CVE-2026-113881: WatchGuard Fireware OS stack buffer overflow in VPN Network Access Enforcement](https://junglewise.ai/threats/cve-2026-113881-a-stack-based-buffer-overflow-vulnerability-in-fireware-os-s-vpn) (info, published 27 Oct 2026) - [CVE-2026-112710: WatchGuard Fireware OS heap overflow in AD authentication service](https://junglewise.ai/threats/cve-2026-112710-a-heap-based-buffer-overflow-vulnerability-exists-in-the) (info, published 27 Oct 2026) - [CVE-2026-112709: WatchGuard Fireware OS heap buffer overflow in AD authentication](https://junglewise.ai/threats/cve-2026-112709-a-heap-based-buffer-overflow-vulnerability-in-the-fireware-os) (info, published 27 Oct 2026) - [CVE-2026-111107: WatchGuard Fireware OS NULL pointer dereference in management interface](https://junglewise.ai/threats/cve-2026-111107-a-null-pointer-dereference-vulnerability-in-watchguard-fireware) (info, published 27 Oct 2026) - [CVE-2026-104381: WatchGuard Fireware OS missing authentication in FireCluster state sync](https://junglewise.ai/threats/cve-2026-104381-a-missing-authentication-vulnerability-in-fireware-os-s) (info, published 27 Oct 2026) - [CVE-2026-103594: WatchGuard Fireware OS stack buffer overflow in WireGuard configuration](https://junglewise.ai/threats/cve-2026-103594-a-stack-based-buffer-overflow-vulnerability-in-fireware-os-s) (info, published 27 Oct 2026) - [CVE-2026-103593: WatchGuard Fireware OS stack buffer overflow in logging service](https://junglewise.ai/threats/cve-2026-103593-a-stack-based-buffer-overflow-vulnerability-in-the-fireware-os) (info, published 27 Oct 2026) - [CVE-2026-96293: WatchGuard Endpoint Security cleartext storage of FileVault recovery key](https://junglewise.ai/threats/cve-2026-96293-a-cleartext-storage-of-sensitive-information-vulnerability-in) (info, published 22 Oct 2026) - [CVE-2026-115253: WatchGuard Agent incorrect permission assignment in log directory](https://junglewise.ai/threats/cve-2026-115253-an-incorrect-permission-assignment-vulnerability-in-the) (info, published 22 Oct 2026) ## Most severe Watchguard vulnerabilities - [CVE-2025-9242: WatchGuard Fireware OS out-of-bounds write in iked process](https://junglewise.ai/threats/cve-2025-9242-watchguard-fireware-os-out-of-bounds-write-in-iked-process) (critical, exploited in the wild, CVSS 9.8, published 12 Nov 2025) - [CVE-2025-14733: WatchGuard Fireware OS out-of-bounds write in iked process](https://junglewise.ai/threats/cve-2025-14733-watchguard-fireware-os-out-of-bounds-write-in-iked-process) (critical, exploited in the wild, CVSS 9.8, published 19 Dec 2025) - [CVE-2022-26318: WatchGuard Firebox and XTM Appliances Arbitrary Code Execution](https://junglewise.ai/threats/cve-2022-26318-watchguard-firebox-and-xtm-appliances-arbitrary-code-execution) (critical, exploited in the wild, CVSS 9.8, published 25 Mar 2022) - [CVE-2022-23176: WatchGuard Firebox and XTM Privilege Escalation Vulnerability](https://junglewise.ai/threats/cve-2022-23176-watchguard-firebox-and-xtm-privilege-escalation-vulnerability) (critical, exploited in the wild, CVSS 8.8, published 11 Apr 2022) - [CVE-2026-6788: WatchGuard Agent uncontrolled search path in Windows](https://junglewise.ai/threats/cve-2026-6788-watchguard-agent-uncontrolled-search-path-in-windows) (high, CVSS 7.8, published 6 May 2026) - [CVE-2026-6787: WatchGuard Agent hard-coded cryptographic key in Windows agent](https://junglewise.ai/threats/cve-2026-6787-watchguard-agent-hard-coded-cryptographic-key-in-windows-agent) (high, CVSS 7.8, published 6 May 2026) - [CVE-2026-41288: WatchGuard Agent privilege escalation in patch management component](https://junglewise.ai/threats/cve-2026-41288-watchguard-agent-privilege-escalation-in-patch-management) (high, CVSS 7.8, published 6 May 2026) - [CVE-2025-11838: WatchGuard Fireware OS memory corruption DoS in IKEv2 VPN](https://junglewise.ai/threats/cve-2025-11838-watchguard-fireware-os-memory-corruption-dos-in-ikev2-vpn) (high, CVSS 7.5, published 4 Dec 2025) - [CVE-2025-1545: WatchGuard Fireware XPath injection in Web CGI](https://junglewise.ai/threats/cve-2025-1545-watchguard-fireware-xpath-injection-in-web-cgi) (high, CVSS 7.5, published 4 Dec 2025) - [CVE-2025-12195: WatchGuard Fireware OS out-of-bounds write in CLI](https://junglewise.ai/threats/cve-2025-12195-watchguard-fireware-os-out-of-bounds-write-in-cli) (high, CVSS 7.2, published 4 Dec 2025) ## Vulnerabilities per week 24 vulnerabilities in the last four weeks, up 26% on the four before (19). | Week of | Vulns | Critical | Exploited | | --- | --- | --- | --- | | 17 Aug 2026 | 0 | 0 | 0 | | 24 Aug 2026 | 30 | 0 | 0 | | 31 Aug 2026 | 0 | 0 | 0 | | 7 Sep 2026 | 0 | 0 | 0 | | 14 Sep 2026 | 0 | 0 | 0 | | 21 Sep 2026 | 1 | 0 | 0 | | 28 Sep 2026 | 18 | 0 | 0 | | 5 Oct 2026 | 0 | 0 | 0 | | 12 Oct 2026 | 0 | 0 | 0 | | 19 Oct 2026 | 2 | 0 | 0 | | 26 Oct 2026 | 18 | 0 | 0 | | 2 Nov 2026 | 4 | 0 | 0 | | 9 Nov 2026 | 1 | 0 | 0 | ## Watchguard technologies - [Watchguard Fireware OS](https://junglewise.ai/threats/technologies/fireware-os): 76 vulnerabilities - [Watchguard Dimension](https://junglewise.ai/threats/technologies/dimension): 16 vulnerabilities - [Watchguard Agent](https://junglewise.ai/threats/technologies/agent): 8 vulnerabilities - [Watchguard Firebox](https://junglewise.ai/threats/technologies/firebox): 6 vulnerabilities - [Watchguard Fireware](https://junglewise.ai/threats/technologies/fireware): 6 vulnerabilities - [Watchguard AuthPoint Authentication Gateway](https://junglewise.ai/threats/technologies/authpoint-authentication-gateway): 5 vulnerabilities - [Watchguard XTM Appliances](https://junglewise.ai/threats/technologies/xtm-appliances): 4 vulnerabilities - [Watchguard Mobile VPN with SSL client](https://junglewise.ai/threats/technologies/mobile-vpn-with-ssl-client): 3 vulnerabilities - [Watchguard XTM](https://junglewise.ai/threats/technologies/xtm): 3 vulnerabilities ## Sources NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories. Rebuilt every hour. Cite as: Junglewise Threat Intelligence, "Watchguard vulnerabilities", https://junglewise.ai/threats/vendors/watchguard, 12 November 2026.