WatchGuard Firebox

Name: WatchGuard Firebox
Brand: WatchGuard

productDE

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

by severity

5critical20high19medium0low

updated 2026-10-27

vulnerabilities (64)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2025-9242US	critical9.8OT critical	92.2% (100th)	KEV	12.5.13	2025-09-17	5 versions
CVE-2025-14733US	critical9.8OT critical	29.4% (98th)	KEV	no fix	2025-12-19	4 versions
CVE-2024-6387US	high8.1	99.5% (100th)	Exploit	12.10.4 Update 1	2024-07-01	< 12.10.4 Update 1
CVE-2025-59396US	—	—	Exploit	12.11.4	2025-11-06	< 12.11.4
CVE-2026-3342US	high7.2	6.65% (94th)	—	12.5.17	2026-03-03	3 versions
CVE-2023-41358US	high7.5	1.25% (69th)	—	12.10.1	2023-08-29	< 12.10.1
CVE-2023-41360US	critical9.1	1.15% (67th)	—	12.10.1	2023-08-29	< 12.10.1
CVE-2023-41359US	critical9.1	1.15% (67th)	—	12.10.1	2023-08-29	< 12.10.1
CVE-2026-13368US	high8.1	0.94% (61st)	—	12.12.1	2026-07-03	2 versions
CVE-2026-1498US	—	0.92% (60th)	—	2026.1	2026-01-30	3 versions
CVE-2023-41361US	critical9.8	0.90% (59th)	—	12.10.1	2023-08-29	< 12.10.1
CVE-2026-13384US	high7.2	0.72% (54th)	—	2026.2.1	2026-07-03	2 versions
CVE-2026-13383US	high7.2	0.72% (54th)	—	2026.2.1	2026-07-03	2 versions
CVE-2026-19318US	—	0.71% (53rd)	—	no fix	2026-08-28	7 versions
CVE-2026-19313US	—	0.71% (53rd)	—	no fix	2026-08-28	7 versions
CVE-2026-19315US	—	0.70% (53rd)	—	no fix	2026-08-28	7 versions
CVE-2025-12195US	high7.2	0.69% (53rd)	—	12.11.5	2025-12-04	3 versions
CVE-2026-3987US	high7.2	0.68% (52nd)	—	2026.2	2026-04-01	2 versions
CVE-2026-13086US	—OT elevated	0.66% (51st)	—	no fix	2026-08-28	7 versions
CVE-2026-13053US	high7.2	0.64% (51st)	—	12.12.1	2026-07-03	2 versions
CVE-2026-13050US	high7.2	0.64% (51st)	—	2026.2.1	2026-07-03	2 versions
CVE-2025-12196US	high7.2	0.62% (50th)	—	12.11.5	2025-12-04	3 versions
CVE-2026-13084US	high7.5	0.61% (49th)	—	12.12.1	2026-07-03	2 versions
CVE-2026-78008US	—	0.61% (49th)	—	no fix	2026-08-28	6 versions
CVE-2026-13054US	high7.2	0.60% (49th)	—	2026.2.1	2026-07-03	2 versions
CVE-2026-13371US	medium4.9	0.59% (48th)	—	12.12.1	2026-07-03	2 versions
CVE-2025-4805US	—	0.57% (47th)	—	12.11.2	2025-05-16	< 12.11.2
CVE-2025-1239US	—	0.55% (46th)	—	no fix	2025-02-14	≤ Fireware OS <12.11.1
CVE-2026-78011US	—	0.54% (45th)	—	no fix	2026-08-28	6 versions
CVE-2026-78009US	—	0.54% (45th)	—	no fix	2026-08-28	6 versions
CVE-2026-19317US	—	0.54% (45th)	—	no fix	2026-08-28	6 versions
CVE-2026-19316US	—	0.54% (45th)	—	no fix	2026-08-28	6 versions
CVE-2026-19314US	—	0.54% (45th)	—	no fix	2026-08-28	6 versions
CVE-2026-78010US	—	0.54% (45th)	—	no fix	2026-08-28	6 versions
CVE-2025-11838US	high7.5	0.50% (42nd)	—	12.11.5	2025-12-04	3 versions
CVE-2025-1545US	high7.5	0.48% (41st)	—	12.5.14	2025-12-04	3 versions
CVE-2025-6947US	—	0.48% (41st)	—	12.11.3	2025-09-15	< 12.11.3
CVE-2025-4804US	—	0.46% (40th)	—	12.11.2	2025-05-16	< 12.11.2
CVE-2025-6999US	—	0.45% (38th)	—	12.11.3	2025-09-15	< 12.11.3
CVE-2025-12026US	high7.2	0.44% (38th)	—	2025.1.3	2025-12-04	3 versions
CVE-2026-81851US	—	0.41% (35th)	—	no fix	2026-08-28	4 versions
CVE-2026-8247US	high8.8	0.38% (32nd)	—	12.12.1	2026-07-03	2 versions
CVE-2025-1547US	high7.2	0.35% (29th)	—	12.11.3	2025-12-04	< 12.11.3
CVE-2026-13722US	high7.2	0.33% (26th)	—	12.12.1	2026-07-03	2 versions
CVE-2025-4106US	—OT elevated	0.32% (25th)	—	12.11.3	2025-10-24	< 12.11.3
CVE-2025-1071US	medium4.8	0.30% (23rd)	—	no fix	2025-02-14	≤ Fireware OS <12.11.1
CVE-2026-3344US	medium4.9	0.29% (21st)	—	12.11.8	2026-03-03	3 versions
CVE-2026-4266US	medium6.7	0.27% (19th)	—	12.12	2026-03-30	3 versions
CVE-2026-13377US	medium4.8	0.27% (19th)	—	2026.2.1	2026-07-03	2 versions
CVE-2026-13376US	medium4.8	0.27% (19th)	—	12.12.1	2026-07-03	2 versions

showing 50 of 64

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-787Out-of-bounds Write16 CVEs
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')16 CVEs
CWE-125Out-of-bounds Read5 CVEs
CWE-121Stack-based Buffer Overflow4 CVEs
CWE-191Integer Underflow (Wrap or Wraparound)4 CVEs
CWE-120Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')2 CVEs
CWE-122Heap-based Buffer Overflow2 CVEs
CWE-1284Improper Validation of Specified Quantity in Input2 CVEs

sources (2)

Which sources assert this record, and when.

DECERT-Bund (BSI CSAF)64 CVEs
NLNCSC-NL (CSAF)5 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan