Brand
WatchGuard: actively exploited vulnerabilities
4 vulnerabilities in WatchGuard products (Firebox / XTM (Fireware)) are in CISA’s catalog of exploited vulnerabilities. Last added: December 19, 2025.
The brand’s general security advisories page, not the advisory for a specific vulnerability (address checked September 28, 2026).
-
2 vulnerabilities added in the last 12 months
-
4 exploited vulnerabilities in the catalog, in total
-
0 added in the last 30 days
By category
Add just one WatchGuard category to your radar, or open its page.
- Firewalls, VPNs and remote access 4 vulnerabilities
A high count also reflects how widely a product is deployed and how much attackers care about it: it is not a security rating.
Affected products
- Firebox / XTM (Fireware)4 vulnerabilities, Firewalls and VPNs
Name used by CISA: WatchGuard. Product families: indicative classification by this site.
Patch first
In the order of the main list (Patch first): recent additions first, then the most severe. The number is the rank within this WatchGuard list.
- Rank 1
WatchGuard Firebox / XTM (Fireware)CVE-2025-14733
WatchGuard Firebox Out of Bounds Write Vulnerability
Ransomware
CVSS severity 9.8critical
Added Dec 19, 2025
- Rank 2
WatchGuard Firebox / XTM (Fireware)CVE-2025-9242
WatchGuard Firebox Out-of-Bounds Write Vulnerability
CVSS severity 9.8critical
Added Nov 12, 2025
- Rank 3
WatchGuard Firebox / XTM (Fireware)CVE-2022-26318
WatchGuard Firebox and XTM Appliances Arbitrary Code Execution
CVSS severity 9.8critical
Added Mar 25, 2022
- Rank 4
WatchGuard Firebox / XTM (Fireware)CVE-2022-23176
WatchGuard Firebox and XTM Privilege Escalation Vulnerability
CVSS severity 8.8high
Added Apr 11, 2022
Follow and verify
Indicative classification, based on the vendor and product names given by CISA. How products are classified.