WatchGuard — Cyber Attacks, Breaches & Threat Activity

Threat entity extracted from intelligence sources

Frequency
12
occurrences
First Seen
November 13, 2025
Last Seen
July 6, 2026

WatchGuard is a cybersecurity company that manufactures network security appliances, notably the Firebox firewall line running the Fireware OS.

Overview

WatchGuard is a cybersecurity company that manufactures network security appliances, notably the Firebox firewall line running the Fireware OS. In December 2025, multiple critical vulnerabilities in Firebox OS were disclosed and actively exploited in the wild, prompting government alerts and urgent patches, highlighting Firebox as a high-risk attack surface.

Related Threat Clusters

Recent Intelligence Reports

  • CVE-2025-9242 — www.watchguard.com · July 6, 2026
  • 621822 — www.cybersecuritydive.com · May 14, 2026
  • WatchGuard VPN Client for Windows Vulnerability Enables Command Execution With SYSTEM Privileges — Cybersecuritynews · February 5, 2026
  • Hackers attack WatchGuard Firebox firewalls: 120K IPs exposed and vulnerable — Cybernews · December 22, 2025
  • U.S. CISA adds a flaw in WatchGuard Fireware OS to its Known Exploited Vulnerabilities catalog — Securityaffairs.Co · December 20, 2025
  • CISA: 'Critical' WatchGuard Firebox Vulnerability Exploited In Attacks — Crn · December 19, 2025
  • Critical-rated WatchGuard Firebox flaw under active attack — Theregister · December 19, 2025
  • WatchGuard sounds alarm as critical Firebox flaw comes under active attack — Theregister · December 19, 2025

CVSS v3.1 Breakdown