# WatchGuard Fireware OS.

Every CVE that names WatchGuard Fireware OS among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first

- [Fireware OS Missing Authentication in FireCluster Sync Allows Privilege Escalation](https://agentprime.io/advisories/CVE-2026-90465.md)
  `CVE-2026-90465` · CVE record: WatchGuard Fireware OS · CVSS 8.7 High · Not analysed yet · Published 27 Oct 2026 · Tags: Command injection, Authentication bypass, Broken access control
- [Fireware OS Out-of-Bounds Read in FireCluster Sync Allows Denial of Service](https://agentprime.io/advisories/CVE-2026-93862.md)
  `CVE-2026-93862` · CVE record: WatchGuard Fireware OS · CVSS 7.2 High · Not analysed yet · Published 27 Oct 2026 · Tags: Memory corruption, CWE-129, CWE-823
- [Fireware OS Heap Buffer Overflow in AD Authentication Service Allows Pre-Authentication Remote Code Execution](https://agentprime.io/advisories/CVE-2026-112709.md)
  `CVE-2026-112709` · CVE record: WatchGuard Fireware OS · CVSS 9.2 Critical · Critical (CVSS 9+) · Not analysed yet · Published 27 Oct 2026 · Tags: Memory corruption
- [Fireware OS Missing Command Validation allows Authenticated Arbitrary File Modification as Root](https://agentprime.io/advisories/CVE-2026-90464.md)
  `CVE-2026-90464` · CVE record: WatchGuard Fireware OS · CVSS 7.2 High · Not analysed yet · Published 27 Oct 2026 · Tags: Path traversal, Broken access control
- [Fireware OS Stack Buffer Overflow in Logging Service Allows Remote Code Execution](https://agentprime.io/advisories/CVE-2026-103593.md)
  `CVE-2026-103593` · CVE record: WatchGuard Fireware OS · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 27 Oct 2026 · Tags: Memory corruption
- [Fireware OS Stack Buffer Overflow in VPN Network Access Enforcement Allows Unprivileged Code Execution](https://agentprime.io/advisories/CVE-2026-113881.md)
  `CVE-2026-113881` · CVE record: WatchGuard Fireware OS · CVSS 6.1 Medium · Not analysed yet · Published 27 Oct 2026 · Tags: Memory corruption, CWE-129
- [Fireware OS XPath Injection in SSH Authentication Allows Blind Extraction of Configuration Secrets](https://agentprime.io/advisories/CVE-2026-93434.md)
  `CVE-2026-93434` · CVE record: WatchGuard Fireware OS · CVSS 8.7 High · Not analysed yet · Published 27 Oct 2026 · Tags: Other injection, CWE-20, CWE-208
- [Fireware OS Authenticated Stack Buffer Overflow in certd Allows Denial of Service](https://agentprime.io/advisories/CVE-2026-90442.md)
  `CVE-2026-90442` · CVE record: WatchGuard Fireware OS · CVSS 8.6 High · Not analysed yet · Published 27 Oct 2026 · Tags: Memory corruption
- [Fireware OS Heap Buffer Overflow in AD Authentication Service Allows Pre-Authentication Remote Code Execution](https://agentprime.io/advisories/CVE-2026-112710.md)
  `CVE-2026-112710` · CVE record: WatchGuard Fireware OS · CVSS 9.2 Critical · Critical (CVSS 9+) · Not analysed yet · Published 27 Oct 2026 · Tags: Memory corruption
- [Fireware OS Improper Authentication in AuthPoint MFA Verification Allows Session Hijacking](https://agentprime.io/advisories/CVE-2026-82332.md)
  `CVE-2026-82332` · CVE record: WatchGuard Fireware OS · CVSS 5.6 Medium · Not analysed yet · Published 27 Oct 2026 · Tags: Authentication bypass, CWE-346
- [Fireware OS Pre-Authentication Stack Buffer Overflow in SIP Proxy Allows Remote Code Execution](https://agentprime.io/advisories/CVE-2026-93857.md)
  `CVE-2026-93857` · CVE record: WatchGuard Fireware OS · CVSS 9.2 Critical · Critical (CVSS 9+) · Not analysed yet · Published 27 Oct 2026 · Tags: Memory corruption
- [Fireware OS Pre-Authentication Integer Overflow in Access Portal Allows Out-of-Bounds Write](https://agentprime.io/advisories/CVE-2026-93866.md)
  `CVE-2026-93866` · CVE record: WatchGuard Fireware OS · CVSS 9.2 Critical · Critical (CVSS 9+) · Not analysed yet · Published 27 Oct 2026 · Tags: Memory corruption, Authentication bypass
- [Fireware OS Link Following in firewalld Allows Local Arbitrary File Overwrite as Root](https://agentprime.io/advisories/CVE-2026-93864.md)
  `CVE-2026-93864` · CVE record: WatchGuard Fireware OS · CVSS 7.1 High · Not analysed yet · Published 27 Oct 2026 · Tags: Path traversal, CWE-377
- [Fireware OS Stack Buffer Overflow in WireGuard Configuration Allows Remote Code Execution](https://agentprime.io/advisories/CVE-2026-103594.md)
  `CVE-2026-103594` · CVE record: WatchGuard Fireware OS · CVSS 9.5 Critical · Critical (CVSS 9+) · Not analysed yet · Published 27 Oct 2026 · Tags: Memory corruption, CWE-1284
- [Fireware OS Missing Authentication in FireCluster State Sync Allows BOVPN Tunnel Denial of Service](https://agentprime.io/advisories/CVE-2026-104381.md)
  `CVE-2026-104381` · CVE record: WatchGuard Fireware OS · CVSS 6.0 Medium · Not analysed yet · Published 27 Oct 2026 · Tags: Authentication bypass, CWE-345
- [Fireware OS NULL Pointer Dereference in Management Interface Allows Unauthenticated Denial of Service](https://agentprime.io/advisories/CVE-2026-111107.md)
  `CVE-2026-111107` · CVE record: WatchGuard Fireware OS · CVSS 8.7 High · Not analysed yet · Published 27 Oct 2026 · Tags: Memory corruption, CWE-248, CWE-1286
- [Fireware OS Missing Authentication in FireCluster Sync Daemon Allows Remote Root Action Injection](https://agentprime.io/advisories/CVE-2026-93865.md)
  `CVE-2026-93865` · CVE record: WatchGuard Fireware OS · CVSS 9.2 Critical · Critical (CVSS 9+) · Not analysed yet · Published 27 Oct 2026 · Tags: Command injection, Authentication bypass, Broken access control
- [Fireware OS Pre-Authentication NULL Pointer Dereference Allows Remote Denial of Service](https://agentprime.io/advisories/CVE-2026-86134.md)
  `CVE-2026-86134` · CVE record: WatchGuard Fireware OS · CVSS 8.7 High · Not analysed yet · Published 30 Sept 2026 · Tags: Memory corruption
- [Fireware OS Resource Exhaustion in Login Process Allows Denial of Service](https://agentprime.io/advisories/CVE-2026-86104.md)
  `CVE-2026-86104` · CVE record: WatchGuard Fireware OS · CVSS 8.7 High · Not analysed yet · Published 29 Sept 2026 · Tags: Denial of service, CWE-409
- [Fireware OS Stack-based Buffer Overflow in spamd Allows Remote Code Execution](https://agentprime.io/advisories/CVE-2026-18145.md)
  `CVE-2026-18145` · CVE record: WatchGuard Fireware OS · CVSS 8.6 High · Not analysed yet · Published 29 Sept 2026 · Tags: Memory corruption
- [Fireware OS Authorization Bypass in SAML Login Allows Unauthorized SSLVPN Access](https://agentprime.io/advisories/CVE-2026-86101.md)
  `CVE-2026-86101` · CVE record: WatchGuard Fireware OS · CVSS 7.2 High · Not analysed yet · Published 29 Sept 2026 · Tags: Broken access control
- [Fireware OS Deserialization of Untrusted Data in samld Allows Remote Code Execution](https://agentprime.io/advisories/CVE-2026-13046.md)
  `CVE-2026-13046` · CVE record: WatchGuard Fireware OS · CVSS 7.5 High · Not analysed yet · Published 29 Sept 2026 · Tags: Insecure deserialization
- [Fireware OS Code Injection in BOVPN Over TLS Client Allows Remote Code Execution](https://agentprime.io/advisories/CVE-2026-86131.md)
  `CVE-2026-86131` · CVE record: WatchGuard Fireware OS · CVSS 9.2 Critical · Critical (CVSS 9+) · Not analysed yet · Published 29 Sept 2026 · Tags: Code injection, Weak cryptography or TLS, CWE-829
- [Fireware OS Path Traversal in WebUI Management Agent Allows Arbitrary Local File Read](https://agentprime.io/advisories/CVE-2026-13224.md)
  `CVE-2026-13224` · CVE record: WatchGuard Fireware OS · CVSS 8.2 High · Not analysed yet · Published 29 Sept 2026 · Tags: Path traversal
- [Fireware OS Pre-Authentication Integer Underflow in iked Allows Remote Denial of Service](https://agentprime.io/advisories/CVE-2026-86133.md)
  `CVE-2026-86133` · CVE record: WatchGuard Fireware OS · CVSS 8.2 High · Not analysed yet · Published 29 Sept 2026 · Tags: Memory corruption, CWE-1284
- [Fireware OS Missing Authorization in wgagent Management API Allows Denial of Service - Variant B](https://agentprime.io/advisories/CVE-2026-90441.md)
  `CVE-2026-90441` · CVE record: WatchGuard Fireware OS · CVSS 7.1 High · Not analysed yet · Published 29 Sept 2026 · Tags: Information disclosure, Denial of service, Broken access control
- [Fireware OS Uncontrolled Resource Consumption in Diagnostic Tasks Allows Denial of Service](https://agentprime.io/advisories/CVE-2026-18105.md)
  `CVE-2026-18105` · CVE record: WatchGuard Fireware OS · CVSS 7.1 High · Not analysed yet · Published 29 Sept 2026 · Tags: Denial of service
- [Fireware OS Improper Authorization in Access Portal Reverse Proxy](https://agentprime.io/advisories/CVE-2026-86105.md)
  `CVE-2026-86105` · CVE record: WatchGuard Fireware OS · CVSS 5.3 Medium · Not analysed yet · Published 29 Sept 2026 · Tags: Path traversal, Broken access control, CWE-176
- [Fireware OS Missing Authorization in wgagent Management API Allows Denial of Service - Variant A](https://agentprime.io/advisories/CVE-2026-86136.md)
  `CVE-2026-86136` · CVE record: WatchGuard Fireware OS · CVSS 7.1 High · Not analysed yet · Published 29 Sept 2026 · Tags: Path traversal, Memory corruption, Broken access control
- [Fireware OS Pre-Authentication Integer Underflow in iked Allows Denial of Service](https://agentprime.io/advisories/CVE-2026-86132.md)
  `CVE-2026-86132` · CVE record: WatchGuard Fireware OS · CVSS 8.2 High · Not analysed yet · Published 29 Sept 2026 · Tags: Memory corruption
- [Fireware OS NULL Pointer Dereference in NetFlow IPv6 Traffic Processing Allows Remote Denial of Service](https://agentprime.io/advisories/CVE-2026-86128.md)
  `CVE-2026-86128` · CVE record: WatchGuard Fireware OS · CVSS 8.2 High · Not analysed yet · Published 29 Sept 2026 · Tags: Memory corruption
- [Fireware OS Pre-Authentication Stack Buffer Overflow in fingerd Allows Remote Code Execution](https://agentprime.io/advisories/CVE-2026-81433.md)
  `CVE-2026-81433` · CVE record: WatchGuard Fireware OS · CVSS 8.7 High · Not analysed yet · Published 29 Sept 2026 · Tags: Memory corruption
- [Fireware OS Pre-Authentication Type Confusion in iked Allows Remote Code Execution](https://agentprime.io/advisories/CVE-2026-19315.md)
  `CVE-2026-19315` · CVE record: WatchGuard Fireware OS · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 27 Aug 2026 · Tags: Memory corruption
- [Fireware OS Integer Underflow in iked Allows Unauthenticated Denial of Service (DoS)](https://agentprime.io/advisories/CVE-2026-19314.md)
  `CVE-2026-19314` · CVE record: WatchGuard Fireware OS · CVSS 8.7 High · Not analysed yet · Published 27 Aug 2026 · Tags: Memory corruption
- [Fireware OS Pre-Authentication Out-of-Bounds Read in iked Allows Denial of Service (DoS)](https://agentprime.io/advisories/CVE-2026-19317.md)
  `CVE-2026-19317` · CVE record: WatchGuard Fireware OS · CVSS 8.7 High · Not analysed yet · Published 27 Aug 2026 · Tags: Memory corruption
- [Fireware OS Integer Underflow in Iked Allows Unauthenticated Denial of Service (DoS)](https://agentprime.io/advisories/CVE-2026-78011.md)
  `CVE-2026-78011` · CVE record: WatchGuard Fireware OS · CVSS 8.7 High · Not analysed yet · Published 27 Aug 2026 · Tags: Memory corruption
- [Fireware OS Stack-Based Buffer Overflow in iked Allows Unauthenticated Denial of Service](https://agentprime.io/advisories/CVE-2026-78010.md)
  `CVE-2026-78010` · CVE record: WatchGuard Fireware OS · CVSS 8.7 High · Not analysed yet · Published 27 Aug 2026 · Tags: Memory corruption, CWE-1284
- [Fireware OS Stack-Based Buffer Overflow in Mobile Security epm Endpoint](https://agentprime.io/advisories/CVE-2026-13086.md)
  `CVE-2026-13086` · CVE record: WatchGuard Fireware OS · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 27 Aug 2026 · Tags: Memory corruption, Hard-coded credentials
- [Fireware OS Pre-Authentication Heap Buffer Overflow in iked Allows Remote Code Execution](https://agentprime.io/advisories/CVE-2026-19313.md)
  `CVE-2026-19313` · CVE record: WatchGuard Fireware OS · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 27 Aug 2026 · Tags: Memory corruption
- [Fireware OS Pre-Authentication Double Free in iked Allows Denial of Service (DoS)](https://agentprime.io/advisories/CVE-2026-19316.md)
  `CVE-2026-19316` · CVE record: WatchGuard Fireware OS · CVSS 8.7 High · Not analysed yet · Published 27 Aug 2026 · Tags: Memory corruption
- [Fireware OS Out-of-Bounds Read in iked Allows Unauthenticated Denial of Service (DoS)](https://agentprime.io/advisories/CVE-2026-78009.md)
  `CVE-2026-78009` · CVE record: WatchGuard Fireware OS · CVSS 8.7 High · Not analysed yet · Published 27 Aug 2026 · Tags: Memory corruption, CWE-20
- [Fireware OS Pre-Authentication Stack Buffer Overflow in iked Allows Remote Code Execution](https://agentprime.io/advisories/CVE-2026-19318.md)
  `CVE-2026-19318` · CVE record: WatchGuard Fireware OS · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 27 Aug 2026 · Tags: Memory corruption, CWE-129
- [Fireware OS Authenticated Buffer Overflow in wgagent](https://agentprime.io/advisories/CVE-2026-78008.md)
  `CVE-2026-78008` · CVE record: WatchGuard Fireware OS · CVSS 8.6 High · Not analysed yet · Published 27 Aug 2026 · Tags: Memory corruption
- [Fireware OS Heap-Based Buffer Overflow in iked Allows Denial of Service](https://agentprime.io/advisories/CVE-2026-81851.md)
  `CVE-2026-81851` · CVE record: WatchGuard Fireware OS · CVSS 6.9 Medium · Not analysed yet · Published 27 Aug 2026 · Tags: Memory corruption, CWE-1284
- [WatchGuard Firebox Authenticated Out of Bounds Write in Management CLI Command Handler](https://agentprime.io/advisories/CVE-2026-13053.md)
  `CVE-2026-13053` · CVE record: WatchGuard Fireware OS · CVSS 8.6 High · Not analysed yet · Published 2 Jul 2026 · Tags: Memory corruption
- [WatchGuard Firebox networkd Out of Bounds Write Vulnerability](https://agentprime.io/advisories/CVE-2026-13050.md)
  `CVE-2026-13050` · CVE record: WatchGuard Fireware OS · CVSS 8.6 High · Not analysed yet · Published 2 Jul 2026 · Tags: Memory corruption
- [WatchGuard Firebox Arbitrary File Write via Path Traversal in Management Web UI](https://agentprime.io/advisories/CVE-2026-13054.md)
  `CVE-2026-13054` · CVE record: WatchGuard Fireware OS · CVSS 8.6 High · Not analysed yet · Published 2 Jul 2026 · Tags: Path traversal
- [WatchGuard Firebox admd Out of Bounds Write Vulnerability](https://agentprime.io/advisories/CVE-2026-8247.md)
  `CVE-2026-8247` · CVE record: WatchGuard Fireware OS · CVSS 7.7 High · Not analysed yet · Published 2 Jul 2026 · Tags: Memory corruption
- [WatchGuard Firebox Hardcoded Fallback Encryption Key in Access Portal Resource Credential Database](https://agentprime.io/advisories/CVE-2026-13728.md)
  `CVE-2026-13728` · CVE record: WatchGuard Fireware OS · CVSS 5.9 Medium · Not analysed yet · Published 2 Jul 2026 · Tags: Hard-coded credentials
- [Null Pointer Dereference in WatchGuard Fireware OS iked Process](https://agentprime.io/advisories/CVE-2026-13084.md)
  `CVE-2026-13084` · CVE record: WatchGuard Fireware OS · CVSS 8.7 High · Not analysed yet · Published 2 Jul 2026 · Tags: Memory corruption
- [WatchGuard Firebox Race Condition and Use-After-Free in Mobile VPN with IKEv2 LDAP Authentication](https://agentprime.io/advisories/CVE-2026-13368.md)
  `CVE-2026-13368` · CVE record: WatchGuard Fireware OS · CVSS 9.2 Critical · Critical (CVSS 9+) · Not analysed yet · Published 2 Jul 2026 · Tags: Memory corruption
- [WatchGuard Firebox Firmware Image Validation Bypass in WatchGuard Fireware OS](https://agentprime.io/advisories/CVE-2026-13722.md)
  `CVE-2026-13722` · CVE record: WatchGuard Fireware OS · CVSS 8.6 High · Not analysed yet · Published 2 Jul 2026 · Tags: Weak cryptography or TLS
- [WatchGuard Firebox wgagent Out of Bounds Write Vulnerability](https://agentprime.io/advisories/CVE-2026-13384.md)
  `CVE-2026-13384` · CVE record: WatchGuard Fireware OS · CVSS 8.6 High · Not analysed yet · Published 2 Jul 2026 · Tags: Memory corruption
- [WatchGuard Firebox ikestubd Out of Bounds Write Vulnerability](https://agentprime.io/advisories/CVE-2026-13383.md)
  `CVE-2026-13383` · CVE record: WatchGuard Fireware OS · CVSS 8.6 High · Not analysed yet · Published 2 Jul 2026 · Tags: Memory corruption
- [WatchGuard Firebox Stored Cross-Site-Scripting (XSS) Vulnerability in SIP Proxy Configuration](https://agentprime.io/advisories/CVE-2026-13377.md)
  `CVE-2026-13377` · CVE record: WatchGuard Fireware OS · CVSS 4.8 Medium · Not analysed yet · Published 2 Jul 2026 · Tags: Cross-site scripting (XSS)
- [WatchGuard Firebox Stored Cross-Site-Scripting (XSS) Vulnerability in spamBlocker Module](https://agentprime.io/advisories/CVE-2026-13376.md)
  `CVE-2026-13376` · CVE record: WatchGuard Fireware OS · CVSS 4.8 Medium · Not analysed yet · Published 2 Jul 2026 · Tags: Cross-site scripting (XSS)
- [WatchGuard Firebox Stored Cross-Site-Scripting (XSS) Vulnerability in Autotask Technology Integration Configuration](https://agentprime.io/advisories/CVE-2026-13375.md)
  `CVE-2026-13375` · CVE record: WatchGuard Fireware OS · CVSS 4.8 Medium · Not analysed yet · Published 2 Jul 2026 · Tags: Cross-site scripting (XSS)
- [WatchGuard Firebox Stored Cross-Site-Scripting (XSS) Vulnerability in ConnectWise Technology Integration Configuration](https://agentprime.io/advisories/CVE-2026-13374.md)
  `CVE-2026-13374` · CVE record: WatchGuard Fireware OS · CVSS 4.8 Medium · Not analysed yet · Published 2 Jul 2026 · Tags: Cross-site scripting (XSS)
- [WatchGuard Firebox Stored Cross-Site-Scripting (XSS) Vulnerability in Tigerpaw Technology Integration Configuration](https://agentprime.io/advisories/CVE-2026-13373.md)
  `CVE-2026-13373` · CVE record: WatchGuard Fireware OS · CVSS 4.8 Medium · Not analysed yet · Published 2 Jul 2026 · Tags: Cross-site scripting (XSS)
- [WatchGuard Firebox Management Web UI Denial of Service via Unsafe Deserialization](https://agentprime.io/advisories/CVE-2026-13371.md)
  `CVE-2026-13371` · CVE record: WatchGuard Fireware OS · CVSS 6.9 Medium · Not analysed yet · Published 2 Jul 2026 · Tags: Insecure deserialization

Older: <https://agentprime.io/advisories/technology/watchguard-fireware-os.md?cursor=WyIyMDI2LTA3LTAyVDIzOjA0OjQyLjY3NDAwMFoiLCJDVkUtMjAyNi0xMzM3MSJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=watchguard-fireware-os>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/watchguard-fireware-os/>. Everything for agents: <https://agentprime.io/llms.txt>.