Skip to content
OpenAdvisories
High · 8.7 CVE-2025-11838 EUVD-2025-201298GHSA-j82h-27vv-ghvv

WatchGuard Firebox iked Memory Corruption Vulnerability

Published Dec 4, 2025 · Updated Aug 10, 2026 · Assigned by WatchGuard

Description

A memory corruption vulnerability in WatchGuard Fireware OS may allow an unauthenticated attacker to trigger a Denial of Service (DoS) condition in the Mobile User VPN with IKEv2 and the Branch Office VPN using IKEv2 when configured with a dynamic gateway peer.

Affected products

VendorProductAffectedFixed
WatchGuard Fireware OS 2025.1 – ≤ 2025.1.3, 12.6.1 – ≤ 12.11.5 —

Advisories 1

References