CVE-2026-8247
Published Jul 3, 2026An Out-of-bounds Write vulnerability in WatchGuard Fireware OS may allow an unauthenticated attacker on the same local network segment to execute arbitrary code. This vulnerab…
- evidence mentions
- 2
- Buzz score
- 21.0
Vendor/product archive
watchguard / firebox_t125 CVEs
Beta · best-effort12 CVEs tagged to watchguard / firebox_t125 — 0 Critical, 7 High, 5 Medium, 0 Low, 0 Unrated.
CVE-2026-13722
Published Jul 3, 2026WatchGuard Fireware OS contains a firmware validation bypass when processing a backup image via the backup/restore feature. An authenticated administrator can exploit this vulnera…
- evidence mentions
- 2
- Buzz score
- 21.0
CVE-2026-3342
Published Mar 3, 2026An Out-of-bounds Write vulnerability in WatchGuard Fireware OS may allow an authenticated privileged administrator to execute arbitrary code with root permissions via an exposed m…
- evidence mentions
- 1
- Buzz score
- 11.9
CVE-2025-1545
Published Dec 4, 2025An XPath Injection vulnerability in WatchGuard Fireware OS may allow a remote unauthenticated attacker to retrieve sensitive information from the Firebox configuration through an…
- evidence mentions
- 2
- Buzz score
- 21.0
CVE-2025-13940
Published Dec 4, 2025An Expected Behavior Violation [CWE-440] vulnerability in WatchGuard Fireware OS may allow an attacker to bypass the Fireware OS boot time system integrity check and prevent the F…
- evidence mentions
- 2
- Buzz score
- 21.0
CVE-2025-13939
Published Dec 4, 2025Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in WatchGuard Fireware OS (Gateway Wireless Controller module) allows Sto…
- evidence mentions
- 2
- Buzz score
- 21.0
CVE-2025-13938
Published Dec 4, 2025Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in WatchGuard Fireware OS (Autotask Technology Integration module) allows…
- evidence mentions
- 2
- Buzz score
- 21.0
CVE-2025-13937
Published Dec 4, 2025Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in WatchGuard Fireware OS (ConnectWise Technology Integration module) all…
- evidence mentions
- 2
- Buzz score
- 21.0
CVE-2025-13936
Published Dec 4, 2025Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in WatchGuard Fireware OS (Tigerpaw Technology Integration module) allows…
- evidence mentions
- 2
- Buzz score
- 21.0
CVE-2025-12196
Published Dec 4, 2025An Out-of-bounds Write vulnerability in WatchGuard Fireware OS's CLI could allow an authenticated privileged user to execute arbitrary code via a specially crafted CLI command.
- evidence mentions
- 2
- Buzz score
- 21.0
CVE-2025-12026
Published Dec 4, 2025An Out-of-bounds Write vulnerability in WatchGuard Fireware OS’s certificate request command could allow an authenticated privileged user to execute arbitrary code via specially c…
- evidence mentions
- 2
- Buzz score
- 21.0
CVE-2025-11838
Published Dec 4, 2025A memory corruption vulnerability in WatchGuard Fireware OS may allow an unauthenticated attacker to trigger a Denial of Service (DoS) condition in the Mobile User VPN with IKEv2…
- evidence mentions
- 2
- Buzz score
- 21.0
Showing 1-12 of 12 CVEsPage 1 of 1