Skip to content
Watchguard vulnerabilities
Newest
-
watchguard authpoint authentication gateway
WatchGuard AuthPoint Gateway Capture-replay Allows Unauthorized Administrative Actions
CVE-2026-121640
9.1 Critical
-
watchguard authpoint authentication gateway
WatchGuard AuthPoint Gateway Improper Authentication Allows Unauthenticated Denial of Service
CVE-2026-121639
9.2 Critical
-
watchguard authpoint authentication gateway
WatchGuard AuthPoint Gateway Improper Certificate Validation Allows Man-in-the-Middle Attacks
CVE-2026-121638
9.1 Critical
-
watchguard authpoint authentication gateway
WatchGuard AuthPoint Gateway Improper HMAC Validation in LDAP Authentication Callback Allows Forged Authentication Results
CVE-2026-121637
8.9 High
-
watchguard mobile vpn with ssl client
Mobile VPN with SSL Client for Windows: Cleartext Transmission of VPN Credentials over Local Management Socket
CVE-2026-115495
5.7 Medium
-
watchguard fireware os
Fireware OS Missing Authentication in FireCluster Sync Allows Privilege Escalation
CVE-2026-90465
8.7 High
-
watchguard fireware os
Fireware OS Out-of-Bounds Read in FireCluster Sync Allows Denial of Service
CVE-2026-93862
7.2 High
-
watchguard fireware os
Fireware OS XPath Injection in SSH Authentication Allows Blind Extraction of Configuration Secrets
CVE-2026-93434
8.7 High
-
watchguard fireware os
Fireware OS Missing Command Validation allows Authenticated Arbitrary File Modification as Root
CVE-2026-90464
7.2 High
-
watchguard fireware os
Fireware OS Authenticated Stack Buffer Overflow in certd Allows Denial of Service
CVE-2026-90442
8.6 High
-
watchguard fireware os
Fireware OS Stack Buffer Overflow in VPN Network Access Enforcement Allows Unprivileged Code Execution
CVE-2026-113881
6.1 Medium
-
watchguard fireware os
Fireware OS Heap Buffer Overflow in AD Authentication Service Allows Pre-Authentication Remote Code Execution
CVE-2026-112710
9.2 Critical
-
watchguard fireware os
Fireware OS Heap Buffer Overflow in AD Authentication Service Allows Pre-Authentication Remote Code Execution
CVE-2026-112709
9.2 Critical
-
watchguard fireware os
Fireware OS Stack Buffer Overflow in Logging Service Allows Remote Code Execution
CVE-2026-103593
9.1 Critical
-
watchguard fireware os
Fireware OS Pre-Authentication Integer Overflow in Access Portal Allows Out-of-Bounds Write
CVE-2026-93866
9.2 Critical
-
watchguard fireware os
Fireware OS Missing Authentication in FireCluster Sync Daemon Allows Remote Root Action Injection
CVE-2026-93865
9.2 Critical
-
watchguard fireware os
Fireware OS Link Following in firewalld Allows Local Arbitrary File Overwrite as Root
CVE-2026-93864
7.1 High
-
watchguard fireware os
Fireware OS Pre-Authentication Stack Buffer Overflow in SIP Proxy Allows Remote Code Execution
CVE-2026-93857
9.2 Critical
-
watchguard fireware os
Fireware OS Improper Authentication in AuthPoint MFA Verification Allows Session Hijacking
CVE-2026-82332
5.6 Medium
-
watchguard fireware os
Fireware OS NULL Pointer Dereference in Management Interface Allows Unauthenticated Denial of Service
CVE-2026-111107
8.7 High
-
watchguard fireware os
Fireware OS Missing Authentication in FireCluster State Sync Allows BOVPN Tunnel Denial of Service
CVE-2026-104381
6.0 Medium
-
watchguard fireware os
Fireware OS Stack Buffer Overflow in WireGuard Configuration Allows Remote Code Execution
CVE-2026-103594
9.5 Critical
-
watchguard agent
WatchGuard Agent Incorrect Permission Assignment in Log Directory Allows Local Log Tampering
CVE-2026-115253
7.3 High
-
watchguard agent
Endpoint Security Cleartext Storage of FileVault Recovery Key in Log File
CVE-2026-96293
6.9 Medium
-
elastic endpoint security
WatchGuard Endpoint Security Missing Authentication in Kernel Memory Access Driver Allows Arbitrary Kernel Memory Access
CVE-2026-13043
Public exploit
9.3 Critical
-
watchguard fireware, fireware os +1 more
Fireware OS Pre-Authentication NULL Pointer Dereference Allows Remote Denial of Service
CVE-2026-86134
8.7 High
-
watchguard fireware, fireware os +1 more
Fireware OS Resource Exhaustion in Login Process Allows Denial of Service
CVE-2026-86104
8.7 High
-
watchguard fireware, fireware os +1 more
Fireware OS Missing Authorization in wgagent Management API Allows Denial of Service - Variant B
CVE-2026-90441
7.1 High
-
watchguard fireware, fireware os +1 more
Fireware OS Missing Authorization in wgagent Management API Allows Denial of Service - Variant A
CVE-2026-86136
7.1 High
-
watchguard fireware, fireware os +1 more
Fireware OS Pre-Authentication Integer Underflow in iked Allows Remote Denial of Service
CVE-2026-86133
8.2 High
-
watchguard fireware, fireware os +1 more
Fireware OS Pre-Authentication Integer Underflow in iked Allows Denial of Service
CVE-2026-86132
8.2 High
-
watchguard fireware, fireware os +1 more
Fireware OS Code Injection in BOVPN Over TLS Client Allows Remote Code Execution
CVE-2026-86131
9.2 Critical
-
watchguard fireware, fireware os +1 more
Fireware OS NULL Pointer Dereference in NetFlow IPv6 Traffic Processing Allows Remote Denial of Service
CVE-2026-86128
8.2 High
-
watchguard fireware, fireware os +1 more
Fireware OS Improper Authorization in Access Portal Reverse Proxy
CVE-2026-86105
5.3 Medium
-
watchguard fireware, fireware os +1 more
Fireware OS Authorization Bypass in SAML Login Allows Unauthorized SSLVPN Access
CVE-2026-86101
7.2 High
-
watchguard fireware os
Fireware OS Pre-Authentication Stack Buffer Overflow in fingerd Allows Remote Code Execution
CVE-2026-81433
8.7 High
-
watchguard fireware, fireware os +1 more
Fireware OS Stack-based Buffer Overflow in spamd Allows Remote Code Execution
CVE-2026-18145
8.6 High
-
watchguard fireware, fireware os +1 more
Fireware OS Uncontrolled Resource Consumption in Diagnostic Tasks Allows Denial of Service
CVE-2026-18105
7.1 High
-
watchguard fireware, fireware os +1 more
Fireware OS Path Traversal in WebUI Management Agent Allows Arbitrary Local File Read
CVE-2026-13224
8.2 High
-
watchguard fireware, fireware os +1 more
Fireware OS Deserialization of Untrusted Data in samld Allows Remote Code Execution
CVE-2026-13046
7.5 High
-
watchguard ap
WatchGuard AP Authenticated Command Injection in Diagnostic CLI
CVE-2026-87969
8.6 High
-
watchguard ap
WatchGuard AP Command Injection in Internal Management API Allows Command Execution
CVE-2026-86102
9.3 Critical
-
watchguard ap
WatchGuard AP Improper Access Control in API Service Allows Unauthenticated Access
CVE-2026-101891
9.3 Critical
-
watchguard authentication gateway, authpoint authentication gateway +1 more
AuthPoint Gateway Improper Authentication in LDAP Sync Allows First-Factor Authentication Bypass
CVE-2026-95676
7.4 High
-
adobe dimension
Dimension CSRF Vulnerability in Database Snapshot Creation Allows Denial of Service
CVE-2026-86135
7.0 High
-
adobe dimension
WatchGuard Dimension Web UI Authentication Brute-Force Due to Missing Rate Limiting
CVE-2026-78617
6.3 Medium
-
adobe dimension
Dimension Stored XSS via Trusted CA Certificate Configuration
CVE-2026-78616
4.8 Medium
-
adobe dimension
WatchGuard Dimension Reflected DOM-Based XSS in Report Detail Page
CVE-2026-78615
4.6 Medium
-
adobe dimension
Dimension SQL Injection in Log Viewer
CVE-2026-78613
8.6 High
-
adobe dimension
Dimension SQL Injection in Scheduled Report
CVE-2026-78612
8.6 High
- Show olderLoading…