Skip to main content
cvebuzz

CVE mentions, exploit signals, and PoC evidence in one fast public view.

CVE detail

CVE-2025-14733

An Out-of-bounds Write vulnerability in WatchGuard Fireware OS may allow a remote unauthenticated attacker to execute arbitrary code. This vulnerability affects both the Mobile User VPN with IKEv2 and the Branch Office VPN using IKEv2 when configured with a dynamic gateway peer.This vulnerability affects Fireware OS 11.10.2 up to and including 11.12.4_Update1, 12.0 up to and including 12.11.5 and 2025.1 up to and including 2025.1.3.

CVSS 9.3 · CriticalBuzz score 68.0KEV listed

Buzz score

Why this CVE is surfacing

Buzz score total 68.0

This all-time snapshot uses the same composite formula as Trending across a 30-year evidence window, rather than a current rolling window.

Buzz score components · mention 23.0 · diversity 20.0 · KEV 25.0 · OTX 0.0 · PoC 0.0
Mention score
23.0
9 evidence mentions in the snapshot
Diversity score
20.0
8 sources across 5 categories
KEV score
25.0
Known exploited vulnerability present
OTX score
0.0
0 OTX pulses
PoC score
0.0
0 repos · best confidence N/A
Best PoC traction
0
Maximum stars on a matched PoC repo

Why it matters now

Mention timeline

Total mentions
0
within the 30d window
Peak daily
0
highest bucket

Evidence

Source links by recency

Newest mentions first
9 source links · newest first
  • CVE-2025-14733Horizon3.ai

    WatchGuard Fireware OS VPN Vulnerability | Active Exploitation

    exploithorizon3.aiJan 5, 2026, 9:31 PM
  • Week in review: WatchGuard Firebox firewalls attacked, infosec enthusiasts targeted with fake PoCsHelp Net Security

    Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: Building cyber talent through competition, residency, and real-world immersion In this Help Net Security interview, Chrisma Jackson, Director of Cybersecurity & Mission Computing Center and CISO at Sandia National Laboratories, reflects on where the cyber talent pipeline breaks down and what it takes to fix it. She discusses skill gaps, hiring and retention realities, and how cybersecurity careers are evolving … More →

    newswww.helpnetsecurity.comDec 28, 2025, 9:00 AM
  • 22nd December – Threat Intelligence ReportCheck Point Research

    For the latest discoveries in cyber research for the week of 22nd December, please download our Threat Intelligence Bulletin. TOP ATTACKS AND BREACHES An adult content platform PornHub has disclosed a data breach linked to analytics provider Mixpanel. The breach exposed more than 200 million records related to Premium users, including email addresses, search, watch, […]

    vendorresearch.checkpoint.comDec 22, 2025, 12:39 PM
  • WatchGuard Firebox firewalls under attack (CVE-2025-14733)Help Net Security

    More than 115,000 internet-facing WatchGuard Firebox firewalls may be vulnerable to compromise via CVE-2025-14733, a remote code execution vulnerability actively targeted by attackers, Shadowserver’s latest scanning reveals. About CVE-2025-14733 WatchGuard Firebox firewalls, which also incorporate VPN and unified threat management capabilities, are used by organizations around the world. The appliances run the Fireware OS, a network security operating system built on a hardened Linux-based kernel. WatchGuard disclosed CVE-2025-14733 on December 18, when it also revealed … More →

    newswww.helpnetsecurity.comDec 22, 2025, 11:24 AM
  • WatchGuard Patches Firebox Zero-Day Exploited in the WildSecurityWeek

    The critical-severity bug in the Fireware OS’s iked process leads to unauthenticated remote code execution.

    newswww.securityweek.comDec 22, 2025, 9:44 AM
  • U.S. CISA adds a flaw in WatchGuard Fireware OS to its Known Exploited Vulnerabilities catalogSecurity Affairs

    U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds a WatchGuard Fireware OS flaw to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added a WatchGuard Firebox OS vulnerability, tracked as CVE-2025-14733 (CVSS Score of 9.3), to its Known Exploited Vulnerabilities (KEV) catalog. This flaw is a critical out-of-bounds write vulnerability in WatchGuard Fireware […]

    newssecurityaffairs.comDec 20, 2025, 10:26 AM
  • WatchGuard fixes ‘critical’ zero-day allowing firewall takeoverCSO Online

    WatchGuard has issued an urgent patch alert for its Firebox firewall appliances after discovering a critical-rated vulnerability that is under exploit by threat actors. Tracked as CVE-2025-14733, with a CVSS score of 9.3, the flaw is an Out-of-bounds Write vulnerability affecting the iked process, a WatchGuard Fireware OS component responsible for the IKEv2 key exchange […]

    newswww.csoonline.comDec 19, 2025, 5:40 PM
  • https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-14733www.cisa.gov

    No excerpt available.

    Mitigationwww.cisa.govDec 19, 2025, 1:16 AM
  • https://www.watchguard.com/wgrd-psirt/advisory/wgsa-2025-00027www.watchguard.com

    No excerpt available.

    Vendor Advisorywww.watchguard.comDec 19, 2025, 1:16 AM

Exploit code

Public exploit repository references

Public PoC repositories are third-party, potentially unsafe artifacts. Treat their code as untrusted and use it only on authorized systems in an isolated, least-privilege environment. cvebuzz does not execute the code or verify that an exploit works.

0 repository references · best confidence N/A · max 0 stars
No public PoC repositories have been matched yet.

Related records

Similar CVEs

6 related CVEs with shared weakness or product evidence