WatchGuard Firebox — Cyber Threats, Attacks & Incidents

Related Threat Clusters

• Akira Ransomware Group Targets Critical Infrastructure, Extracts $42 Million

  The Akira ransomware group has been identified as a significant threat to critical infrastructure, with the U.S. Cybersecurity and Infrastructure Security Agency (CISA) and the FBI warning of its active ransomware…

  9 articles · Updated November 14, 2025
• Critical IKEv2 RCE Vulnerability in WatchGuard Firebox Devices Exploited

  WatchGuard Technologies released patches on July 2, 2026, for a critical remote code execution vulnerability (CVE-2026-13368) affecting all supported Firebox firewall models. This flaw, linked to a race condition in the…

  3 articles · Updated July 4, 2026
• Critical RCE Vulnerability in WatchGuard Firebox Firewalls Actively Exploited

  WatchGuard has issued a warning about a critical remote code execution vulnerability, tracked as CVE-2025-14733, affecting its Firebox firewalls running Fireware OS 11.x and later. The flaw allows unauthenticated…

  20 articles · Updated December 19, 2025
• Critical Vulnerability in WatchGuard Firebox OS Actively Exploited

  A critical vulnerability (CVE-2025-9242) in WatchGuard Firebox OS allows remote unauthenticated attackers to execute arbitrary code. Affected versions include Fireware OS 11.x, 12.x, and 2025.1. The U.S. Cybersecurity &…

  3 articles · Updated November 13, 2025
• CISA Flags Critical HPE OneView Vulnerability as Actively Exploited

  The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has identified a critical vulnerability in HPE OneView, tracked as CVE-2025-37164, as being actively exploited in attacks. This flaw affects HPE's…

  19 articles · Updated January 8, 2026
• Critical Zero-Day Vulnerability in WatchGuard Firewalls Exploited

  A critical zero-day vulnerability, tracked as CVE-2025-14733, has been identified in WatchGuard Firebox firewalls. This flaw, with a severity score of 9.3, allows remote attackers to take control of affected devices,…

  2 articles · Updated December 19, 2025
• Critical Vulnerability in WatchGuard Fireware OS Exposed to Remote Attacks

  A critical vulnerability (CVE-2025-9242) in WatchGuard's Fireware OS has been identified, allowing remote unauthenticated attackers to execute arbitrary code on over 54,000 Firebox devices globally. The U.S.…

  4 articles · Updated November 14, 2025
• WatchGuard Firebox Vulnerabilities Allow Code Injection by Bypassing Integrity Checks

  Recent vulnerabilities in WatchGuard Firebox devices enable attackers to bypass integrity checks and inject malicious code. This security flaw affects users of the Firebox product line, posing significant risks to…

  2 articles · Updated December 8, 2025
• Cisco Faces Multiple Critical Vulnerabilities in Unified CCX and Firewalls

  Cisco has disclosed critical vulnerabilities in its Unified Contact Center Express (CCX) platform and Adaptive Security Appliances (ASA) that allow unauthenticated remote attackers to execute arbitrary code and…

  10 articles · Updated November 10, 2025
• CISA Adds Multiple Vulnerabilities to KEV Catalog, Including WatchGuard Flaw

  The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added vulnerabilities from WatchGuard Firebox, Microsoft Windows, and Gladinet Triofox to its Known Exploited Vulnerabilities (KEV) catalog. Among…

  3 articles · Updated December 20, 2025

Recent Intelligence Reports

• WatchGuard Firebox Patches Third Critical IKEv2 RCE in 10 Months, T15/T35 Still Exposed — Techtimes · July 4, 2026
• Critical HPE OneView Vulnerability Exploited in Attacks — Securityweek · January 8, 2026
• Hackers attack WatchGuard Firebox firewalls: 120K IPs exposed and vulnerable — Cybernews · December 22, 2025
• 125,000 IPs WatchGuard Firebox Devices Exposed to Internet Vulnerable to 0 — Cybersecuritynews · December 22, 2025
• CISA: 'Critical' WatchGuard Firebox Vulnerability Exploited In Attacks — Crn · December 19, 2025
• WatchGuard: Patch exploited 9.3 flaw in Firebox firmware — Scmagazine · December 19, 2025
• Critical-rated WatchGuard Firebox flaw under active attack — Theregister · December 19, 2025
• WatchGuard fixes ‘critical’ zero — Csoonline · December 19, 2025

Related Entities