WatchGuard Fireware OS <2026.3.2

productDE

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

EPSS ≥ 10%

by severity

1critical10high3medium0low

updated 2026-10-27

vulnerabilities (15)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2026-86131US	critical9.8	0.47% (40th)	—	no fix	2026-09-30	—
CVE-2026-86134US	high7.5	0.40% (34th)	—	no fix	2026-09-30	—
CVE-2026-18145US	high7.2	0.39% (33rd)	—	no fix	2026-09-30	—
CVE-2026-86104US	high7.5	0.37% (31st)	—	no fix	2026-09-30	—
CVE-2026-13046US	high7.2	0.37% (31st)	—	no fix	2026-09-30	—
CVE-2026-86132US	high7.5	0.36% (30th)	—	no fix	2026-09-30	—
CVE-2026-86128US	high7.5	0.36% (30th)	—	no fix	2026-09-30	—
CVE-2026-13224US	medium4.9	0.36% (30th)	—	no fix	2026-09-30	—
CVE-2026-86133US	high7.5	0.35% (28th)	—	no fix	2026-09-30	—
CVE-2026-86105US	high7.1	0.31% (23rd)	—	no fix	2026-09-30	—
CVE-2026-86136US	high8.1OT elevated	0.30% (22nd)	—	no fix	2026-09-30	—
CVE-2026-18105US	medium6.5	0.24% (15th)	—	no fix	2026-09-30	—
CVE-2026-86101US	medium6.5OT elevated	0.23% (14th)	—	no fix	2026-09-30	—
CVE-2026-90441US	high8.1OT elevated	0.23% (14th)	—	no fix	2026-09-30	—
CVE-2026-81433US	—	0.20% (10th)	—	no fix	2026-09-30	—

The flaw types (CWEs) most of these CVEs share.

CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')3 CVEs
CWE-400Uncontrolled Resource Consumption3 CVEs
CWE-476NULL Pointer Dereference3 CVEs
CWE-121Stack-based Buffer Overflow2 CVEs
CWE-191Integer Underflow (Wrap or Wraparound)2 CVEs
CWE-285Improper Authorization2 CVEs
CWE-770Allocation of Resources Without Limits or Throttling2 CVEs
CWE-862Missing Authorization2 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.