Skip to main content

Firebox vulnerabilities

2 published alerts for WatchGuard Firebox.

Actively exploited (KEV)

CVE-2025-14733

WatchGuard Firebox Out of Bounds Write Vulnerability

WatchGuard Firebox is listed in CISA's Known Exploited Vulnerabilities catalog (CVE-2025-14733). WatchGuard Fireware OS iked process contains an out of bounds write vulnerability in the OS iked process. This vulnerability may allow a remote unauthenticated attacker to execute arbitrary code and affects both the mobile user VPN with IKEv2 and the branch office VPN using IKEv2 when configured with a dynamic gateway peer. CISA remediation due date: 2025-12-26. If you need help checking exposure, call (864) 335-9223.

Actively exploited (KEV)

CVE-2025-9242

WatchGuard Firebox Out-of-Bounds Write Vulnerability

WatchGuard Firebox is listed in CISA's Known Exploited Vulnerabilities catalog (CVE-2025-9242). WatchGuard Firebox contains an out-of-bounds write vulnerability in the OS iked process that may allow a remote unauthenticated attacker to execute arbitrary code. CISA remediation due date: 2025-12-03. If you need help checking exposure, call (864) 335-9223.