LIVE · cybersecurity feed
Live wire
ASOS Breach Reveals the Risks in Customer-Facing SaaSUnpatched AhsayCBS flaws exploited to deploy webshells, mine cryptoAI Training Critical as Governance Challenges GrowUS Disrupts Chinese State-Sponsored Hacking ToolsCitrix warns admins to patch new NetScaler RCE flaw immediatelyCisco Patches a Dozen Critical VulnerabilitiesCisco warns of critical flaws allowing Nexus switch takeoverCVE-2026-21589 · Exploitation attempts against critical Atlassian flaw have begun (CVE-2026-21589)Cyber experts call on CISA to create mandatory federal OT rulesGremlin Foresight AI finds system weaknesses and verifies the fixes
vendor

Watchguard

10 CVEs published in the last four months and 2 stories. Exploited flaws first.

Critical0
High10
Medium0
Exploited (KEV)0

All recent CVEs

CVECVSSSeverityProductSummaryPublished
CVE-2026-82478.8highfirewareAn Out-of-bounds Write vulnerability in WatchGuard Fireware OS may allow an unauthenticated attacker on the same lo116d ago
CVE-2026-133688.1highfirewareWatchGuard Fireware OS contains a race condition leading to a use-after-free vulnerability in LDAP authentication 116d ago
CVE-2026-130797.8highmobile vpn with sslA local privilege escalation vulnerability in the WatchGuard Mobile VPN with SSL client for Windows allows a local116d ago
CVE-2026-130847.5highfirewareA null pointer dereference vulnerability in WatchGuard Fireware OS may allow a remote unauthenticated attacker to 116d ago
CVE-2026-133837.2highfirewareAn Out-of-bounds Write vulnerability in WatchGuard Fireware OS ikestubd process could allow an authenticated privi116d ago
CVE-2026-133847.2highfirewareAn Out-of-bounds Write vulnerability in WatchGuard Fireware OS wgagent process could allow an authenticated privil116d ago
CVE-2026-137227.2highfirewareWatchGuard Fireware OS contains a firmware validation bypass when processing a backup image via the backup/restore116d ago
CVE-2026-130547.2highfirewareA path traversal vulnerability in the WatchGuard Fireware OS Management Web UI allows a privileged authenticated a116d ago
CVE-2026-130537.2highfirewareAn Out-of-bounds Write vulnerability in WatchGuard Fireware OS's CLI could allow an authenticated privileged user 116d ago
CVE-2026-130507.2highfirewareAn Out-of-bounds Write vulnerability in WatchGuard Fireware OS networkd process could allow an authenticated privi116d ago

Filter the full tracker by Watchguard →

Our coverage of Watchguard

vulnerabilitycritical

WatchGuard Patches Critical Fireware OS Code Injection Vulnerability

WatchGuard has released a series of patches addressing multiple vulnerabilities within its Fireware OS. The update targets a total of fifteen distinct security flaws, encompassing critical code injection vulnerabilities, denial-of-service issues, authorization bypasses, and path traversal bugs. This comprehensive patch aims to fortify the security posture of devices running the Fireware…

CVE-2025-14733critical

CISA: WatchGuard RCE flaw now exploited in ransomware attacks

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has confirmed that a critical remote code execution (RCE) vulnerability in WatchGuard Firebox firewalls, tracked as CVE-2025-14733, is now being exploited by ransomware groups. CISA added this flaw to its Known Exploited Vulnerabilities (KEV) catalog in December, at which point it was already being actively exploited.