WatchGuard Fireware OS — Cyber Threats, Attacks & Incidents

Related Threat Clusters

• Critical IKEv2 RCE Vulnerability in WatchGuard Firebox Devices Exploited

  WatchGuard Technologies released patches on July 2, 2026, for a critical remote code execution vulnerability (CVE-2026-13368) affecting all supported Firebox firewall models. This flaw, linked to a race condition in the…

  3 articles · Updated July 4, 2026
• Critical Vulnerability in WatchGuard Firebox OS Actively Exploited

  A critical vulnerability (CVE-2025-9242) in WatchGuard Firebox OS allows remote unauthenticated attackers to execute arbitrary code. Affected versions include Fireware OS 11.x, 12.x, and 2025.1. The U.S. Cybersecurity &…

  3 articles · Updated November 13, 2025
• Stored XSS Vulnerability in WatchGuard Fireware OS (CVE-2026-13374)

  A Cross-site Scripting (XSS) vulnerability, identified as CVE-2026-13374, has been discovered in WatchGuard Fireware OS, specifically within the ConnectWise Technology Integration module. This vulnerability allows for…

  2 articles · Updated August 12, 2026
• Critical Vulnerability in WatchGuard Fireware OS Exposed to Remote Attacks

  A critical vulnerability (CVE-2025-9242) in WatchGuard's Fireware OS has been identified, allowing remote unauthenticated attackers to execute arbitrary code on over 54,000 Firebox devices globally. The U.S.…

  4 articles · Updated November 14, 2025
• Cisco Faces Multiple Critical Vulnerabilities in Unified CCX and Firewalls

  Cisco has disclosed critical vulnerabilities in its Unified Contact Center Express (CCX) platform and Adaptive Security Appliances (ASA) that allow unauthenticated remote attackers to execute arbitrary code and…

  10 articles · Updated November 10, 2025
• CISA Adds Multiple Vulnerabilities to KEV Catalog, Including WatchGuard Flaw

  The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added vulnerabilities from WatchGuard Firebox, Microsoft Windows, and Gladinet Triofox to its Known Exploited Vulnerabilities (KEV) catalog. Among…

  3 articles · Updated December 20, 2025
• Critical Vulnerability Exposes 125,000 WatchGuard Firebox IPs to Attack

  A critical vulnerability in WatchGuard Firebox firewalls has exposed approximately 125,000 IPs worldwide. The flaw, tracked as CVE-2025-14733, allows unauthenticated remote attackers to execute arbitrary code on…

  2 articles · Updated December 22, 2025

Recent Intelligence Reports

• Read the original at NVD — National Vulnerability Database → — nvd.nist.gov · August 12, 2026
• CVE-2026-13374 (CVSS 4.8) — Aigip.Ai · August 11, 2026
• CVE-2026-13368 — www.watchguard.com · July 6, 2026
• 125,000 IPs WatchGuard Firebox Devices Exposed to Internet Vulnerable to 0 — Cybersecuritynews · December 22, 2025
• U.S. CISA adds a flaw in WatchGuard Fireware OS to its Known Exploited Vulnerabilities catalog — Securityaffairs · December 20, 2025
• U.S. CISA adds a flaw in WatchGuard Fireware OS to its Known Exploited Vulnerabilities catalog — Securityaffairs.Co · December 20, 2025
• Firewall Under Siege: CISA's Urgent Alert on WatchGuard's Exploited Vulnerability — Webpronews · November 14, 2025
• CC-4716 - Exploitation of WatchGuard Firebox OS Vulnerability CVE-2025 — Digital.Nhs.Uk · November 13, 2025

Related Entities