Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

9 records

Priority MEDIUM 49

A type confusion vulnerability in the iked process of WatchGuard Fireware OS allows a remote unauthenticated attacker to execute arbitrary code by sending specially crafted network traffic.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00701 Published 2026-08-27 Fixed in 2026.2.2, 12.12.2 +2 CWE-125
Priority MEDIUM 44

An integer underflow vulnerability in the WatchGuard Fireware OS iked process allows a remote unauthenticated attacker to create a Denial of Service (DoS) condition in VPN processing by sending specially crafted network…

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00544 Published 2026-08-27 Fixed in 2026.2.2, 12.12.2 +2 CWE-191
Priority MEDIUM 44

An out-of-bounds read vulnerability in the WatchGuard Fireware OS iked process allows a remote unauthenticated attacker to create a Denial of Service (DoS) condition in VPN processing by sending specially crafted network…

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00544 Published 2026-08-27 Fixed in 2026.2.2, 12.12.2 +2 CWE-125
Priority MEDIUM 44

An integer underflow vulnerability in the WatchGuard Fireware OS iked process allows a remote unauthenticated attacker to create a Denial of Service (DoS) condition in VPN processing by sending specially crafted network…

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00544 Published 2026-08-27 Fixed in 2026.2.2, 12.12.2 +2 CWE-191
Priority LOW 38

A stack-based buffer overflow vulnerability in the WatchGuard Fireware OS iked process iallows a remote unauthenticated attacker to create a Denial of Service (DoS) condition in VPN processing by sending specially crafte…

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00542 Published 2026-08-27 Fixed in 2026.2.2, 12.12.2 +2 CWE-121
Priority MEDIUM 49

A stack-based buffer overflow in the epm (Endpoint Protection Manager) service used by the deprecated Mobile Security feature in WatchGuard Fireware OS allows an unauthenticated remote attacker to execute arbitrary code.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00662 Published 2026-08-27 Fixed in 2026.2.2, 12.12.2 +2 CWE-121
Priority MEDIUM 44

A double-free vulnerability in the WatchGuard Fireware OS iked process allows a remote unauthenticated attacker to create a Denial of Service (DoS) condition in VPN processing by sending specially crafted network traffic…

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00544 Published 2026-08-27 Fixed in 2026.2.2, 12.12.2 +2 CWE-415
Priority MEDIUM 44

An out-of-bounds read vulnerability in the WatchGuard Fireware OS iked process allows a remote unauthenticated attacker to create a Denial of Service (DoS) condition in VPN processing by sending specially crafted network…

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00544 Published 2026-08-27 Fixed in 2026.2.2, 12.12.2 +2 CWE-125
Priority MEDIUM 40

A buffer overflow vulnerability in the WatchGuard Fireware OS Management Web UI allows an authenticated administrator with network access to cause a denial of service (DoS) condition or potentially execute arbitrary code…

CVSS 4.0HIGH 8.6 Network High privileges No interaction EPSS 0.00606 Published 2026-08-27 Fixed in 2026.2.2, 12.12.2 +2 CWE-787