Skip to content
Critical Vulnerabilities Found in WatchGuard Fireware OS

Critical Vulnerabilities Found in WatchGuard Fireware OS

First seen 2 Nov 2026, 07:46 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •November 2, 2026 at 09:15 UTC

On October 27, 2026, WatchGuard disclosed 18 vulnerabilities in its Fireware OS and Mobile VPN with SSL client. Seventeen of these flaws impact Fireware OS, with CVSS scores ranging from 5.6 to 9.5, categorizing several as critical. Notably, CVE-2026-93857, CVE-2026-93865, and CVE-2026-93866 each have a CVSS score of 9.2. Some vulnerabilities can be exploited by remote, unauthenticated attackers if specific features are enabled. WatchGuard has stated it is unaware of any of these vulnerabilities. The Canadian Centre for Cyber Security has also issued an advisory urging users to apply the latest updates. Users are advised to upgrade to Fireware OS 2026.4 or 12.12.4, and VPN client users to 2026.4. As of November 2, 2026, none of the vulnerabilities are listed in CISA's Known Exploited Vulnerabilities catalog.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated just now How this analysis works

Timeline

2025-09-17
CVE-2025-9242 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2025-12-19
CVE-2025-14733 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2026-10-27
WatchGuard discloses vulnerabilities
WatchGuard published 18 security advisories for Fireware OS and VPN client, with critical flaws identified.
Rescana
2026-10-27
CVE-2026-82332 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2026-10-27
CVE-2026-93857 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2026-10-27
CVE-2026-93865 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2026-10-27
CVE-2026-103593 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2026-10-27
CVE-2026-90465 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2026-10-27
CVE-2026-93866 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2026-10-27
CVE-2026-113881 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE

More articles in this cluster (4)

Following this threat?

Track WatchGuard and CVE-2025-14733 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (23)

1 / 3

Common questions

Which versions are affected?
Fireware OS versions 2026.4, 12.12.4, and older versions 12.5.22 for T15 and T35 appliances.
Is there evidence of exploitation?
No, WatchGuard has stated it is unaware of any exploitation of these vulnerabilities in the wild.
What should users do?
Users should urgently update to the latest versions of Fireware OS or the Mobile VPN client to mitigate risks.