Skip to content
OpenAdvisories

Vendor

WatchGuard

139 known vulnerabilities.

Products

Fireware OS 91 Dimension 17 WatchGuard Agent 9 Mobile VPN with SSL Client 6 AuthPoint Authentication Gateway 5 WatchGuard AP 3 Endpoint Security 3 SSO Client 2 SSO Agent 2 Panda Dome 1 AuthPoint Password Manager 1 SSO Terminal Services Agent 1 Firebox 0 Fireware 0
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • Critical 9.3
    CVE-2026-13043 Public exploit

    WatchGuard Endpoint Security Missing Authentication in Kernel Memory Access Driver Allows Arbitrary Kernel Memory Access

    A missing authentication vulnerability in the Kernel Memory Access Driver (PSKMAD) used by WatchGuard endpoint security products allows a local, authenticated attacker to bypass the driver's access-control handshake and issue arbitrary privileged commands to …

    WatchGuard Endpoint Security
  • Critical 9.3
    CVE-2025-14733 Exploited · Ransomware Public exploit EPSS 29%

    WatchGuard Firebox iked Out of Bounds Write Vulnerability

    An Out-of-bounds Write vulnerability in the WatchGuard Fireware OS iked process may allow a remote unauthenticated attacker to execute arbitrary code. This vulnerability affects both the mobile user VPN with IKEv2 and the branch office VPN using IKEv2 when co…

    WatchGuard Fireware OS
    KEV Dec 19, 2025
  • Medium 6.3
    CVE-2025-1910 Public exploit

    WatchGuard Mobile VPN with SSL Local Privilege Escalation via Update Package

    The WatchGuard Mobile VPN with SSL Client on Windows allows a locally authenticated non-administrative Windows user to escalate their privileges to NT AUTHORITY/SYSTEM on the Windows machine where the VPN Client is installed.

    WatchGuard Mobile VPN with SSL Client
  • Critical 9.3
    CVE-2025-9242 Exploited Public exploit EPSS 92%

    WatchGuard Firebox iked Out of Bounds Write Vulnerability

    An Out-of-bounds Write vulnerability in the WatchGuard Fireware OS iked process may allow a remote unauthenticated attacker to execute arbitrary code. This vulnerability affects both the mobile user VPN with IKEv2 and the branch office VPN using IKEv2 when co…

    WatchGuard Fireware OS
    KEV Nov 12, 2025
  • Medium 6.5
    CVE-2022-31749 Public exploit

    Authenticated arbitrary file read/write in WatchGuard Fireware OS

    An argument injection vulnerability in the diagnose and import pac commands in WatchGuard Fireware OS before 12.8.1, 12.1.4, and 12.5.10 allows an authenticated remote attacker with unprivileged credentials to upload or read files to limited, arbitrary locati…

    WatchGuard Fireware OS
  • Critical 9.3
    CVE-2024-6592 Public exploit

    WatchGuard Firebox Single Sign-On Agent Protocol Authorization Bypass

    An incorrect authorization vulnerability in the protocol communication between the WatchGuard Authentication Gateway (aka Single Sign-On Agent) on Windows and the WatchGuard Single Sign-On Client on Windows and MacOS allows an attacker with network access to …

    WatchGuard SSO Client SSO Agent