PatchTheCVEfireware vulnerabilities and fixes
Recent CVEs affecting fireware, with upgrade or downgrade steps. 17 tracked.
fireware has 17 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 17. Most recent: 2026-07-03. Highest priority: CVE-2026-13368 (score 48/100).
- CVE-2026-13368 HIGH 8.1 UPGRADE WatchGuard Fireware OS contains a race condition leading to a use-after-free vulnerability in LDAP authenticat
- CVE-2026-13084 HIGH 7.5 UPGRADE A null pointer dereference vulnerability in WatchGuard Fireware OS may allow a remote unauthenticated attacker
- CVE-2026-13383 HIGH 7.2 UPGRADE An Out-of-bounds Write vulnerability in WatchGuard Fireware OS ikestubd process could allow an authenticated p
- CVE-2026-13384 HIGH 7.2 UPGRADE An Out-of-bounds Write vulnerability in WatchGuard Fireware OS wgagent process could allow an authenticated pr
- CVE-2026-8247 HIGH 8.8 UPGRADE An Out-of-bounds Write vulnerability in WatchGuard Fireware OS may allow an unauthenticated attacker on the sa
- CVE-2026-13050 HIGH 7.2 UPGRADE An Out-of-bounds Write vulnerability in WatchGuard Fireware OS networkd process could allow an authenticated p
- CVE-2026-13053 HIGH 7.2 UPGRADE An Out-of-bounds Write vulnerability in WatchGuard Fireware OS's CLI could allow an authenticated privileged u
- CVE-2026-13054 HIGH 7.2 UPGRADE A path traversal vulnerability in the WatchGuard Fireware OS Management Web UI allows a privileged authenticat
- CVE-2026-13722 HIGH 7.2 UPGRADE WatchGuard Fireware OS contains a firmware validation bypass when processing a backup image via the backup/res
- CVE-2026-13371 MEDIUM 4.9 UPGRADE An authenticated administrator can trigger a denial-of-service condition in the Fireware Management Web UI by
- CVE-2026-13079 HIGH 7.8 UPGRADE UPGRADE A local privilege escalation vulnerability in the WatchGuard Mobile VPN with SSL client for Windows allows a l
- CVE-2026-13373 MEDIUM 4.8 UPGRADE Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in W
- CVE-2026-13374 MEDIUM 4.8 UPGRADE Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in W
- CVE-2026-13375 MEDIUM 4.8 UPGRADE Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in W
- CVE-2026-13376 MEDIUM 4.8 UPGRADE Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in W
- CVE-2026-13377 MEDIUM 4.8 UPGRADE Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in W
- CVE-2026-13728 MEDIUM 4.4 UPGRADE In exception circumstances, WatchGuard Fireware OS on a FireCluster may use a hard-coded encryption key to enc
FAQ
How do I fix fireware vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is fireware being exploited right now?
None of the tracked fireware CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which fireware CVE should I patch first?
CVE-2026-13368 currently ranks highest (48/100): WatchGuard Fireware OS contains a race condition leading to a use-after-free vulnerability in LDAP authenticat.