en
WatchGuard is a cybersecurity provider offering a unified security platform spanning network security, endpoint protection, identity security, and cloud-delivered management. Its products are delivered through managed service providers and reseller partners to organizations, especially small and midsize or distributed enterprises.
As of 11/08/2026, WatchGuard recorded 75 security vulnerabilities in the last 90 days across 7 products, including 58 rated High or above and 0 known exploited vulnerabilities (KEV) that should be prioritized for immediate remediation.
Over the last 90 days, Fireware OS had the most security vulnerabilities in the WatchGuard ecosystem, with 44 vulnerabilities—approximately 58.67% of the provider's total vulnerabilities during this period.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
CVE-2026-121640WatchGuard AuthPoint Authentication Gateway Capture-Replay Bypass Enables Unauthorized Administrative ActionsCVE-2026-121639WatchGuard AuthPoint Gateway Improper Authentication Allows Unauthenticated Denial of ServiceCVE-2026-121638WatchGuard AuthPoint Gateway Improper Certificate Validation Allows Man-in-the-Middle AttacksCVE-2026-121637WatchGuard AuthPoint Gateway Improper HMAC Validation in LDAP Authentication Callback Allows Forged Authentication ResultsCVE-2026-93866Fireware OS Pre-Authentication Integer Overflow in Access Portal Allows Out-of-Bounds Write| Vulnerability | Exploitation status | Fix | Affected product | Published | Severity |
|---|---|---|---|---|---|
CVE-2026-121640WatchGuard AuthPoint Authentication Gateway Capture-Replay Bypass Enables Unauthorized Administrative Actions | Exploitation statusNot exploited | FixYes |
| Affected productAuthPoint Authentication Gateway |
| Published11/04/2026 |
| SeverityCritical |
CVE-2026-121639WatchGuard AuthPoint Gateway Improper Authentication Allows Unauthenticated Denial of Service | Exploitation statusNot exploited | FixYes | Affected productAuthPoint Authentication Gateway | Published11/04/2026 | SeverityCritical |
|---|
CVE-2026-121638WatchGuard AuthPoint Gateway Improper Certificate Validation Allows Man-in-the-Middle Attacks | Exploitation statusNot exploited | FixYes | Affected productAuthPoint Authentication Gateway | Published11/04/2026 | SeverityCritical |
|---|
CVE-2026-121637WatchGuard AuthPoint Gateway Improper HMAC Validation in LDAP Authentication Callback Allows Forged Authentication Results | Exploitation statusNot exploited | FixYes | Affected productAuthPoint Authentication Gateway | Published11/04/2026 | SeverityHigh |
|---|
CVE-2026-93866Fireware OS Pre-Authentication Integer Overflow in Access Portal Allows Out-of-Bounds Write | Exploitation statusNot confirmed | FixYes | Affected productFireware OS | Published10/27/2026 | SeverityCritical |
|---|
CVE-2026-93865Fireware OS Missing Authentication in FireCluster Sync Daemon Allows Remote Root Action Injection | Exploitation statusNot exploited | FixYes | Affected productFireware OS | Published10/27/2026 | SeverityCritical |
|---|
CVE-2026-93864Fireware OS Link Following in firewalld Allows Local Arbitrary File Overwrite as Root | Exploitation statusNot exploited | FixYes | Affected productFireware OS | Published10/27/2026 | SeverityHigh |
|---|
CVE-2026-93862Fireware OS Out-of-Bounds Read in FireCluster Sync Allows Denial of Service | Exploitation statusNot exploited | FixYes | Affected productFireware OS | Published10/27/2026 | SeverityHigh |
|---|
CVE-2026-93857Fireware OS Pre-Authentication Stack Buffer Overflow in SIP Proxy Allows Remote Code Execution | Exploitation statusNot exploited | FixYes | Affected productFireware OS | Published10/27/2026 | SeverityCritical |
|---|
CVE-2026-93434Fireware OS XPath Injection in SSH Authentication Allows Blind Extraction of Configuration Secrets | Exploitation statusNot confirmed | FixYes | Affected productFireware OS | Published10/27/2026 | SeverityHigh |
|---|
CVE-2026-90465WatchGuard Fireware OS FireCluster Sync Missing Authentication Enables Root Firewall Management Actions | Exploitation statusNot exploited | FixYes | Affected productFireware OS | Published10/27/2026 | SeverityCritical |
|---|
CVE-2026-90464Fireware OS Missing Command Validation allows Authenticated Arbitrary File Modification as Root | Exploitation statusNot confirmed | FixYes | Affected productFireware OS | Published10/27/2026 | SeverityHigh |
|---|
CVE-2026-90442Fireware OS Authenticated Stack Buffer Overflow in certd Allows Denial of Service | Exploitation statusNot confirmed | FixYes | Affected productFireware OS | Published10/27/2026 | SeverityHigh |
|---|
CVE-2026-82332Fireware OS Improper Authentication in AuthPoint MFA Verification Allows Session Hijacking | Exploitation statusNot confirmed | FixYes | Affected productFireware OS | Published10/27/2026 | SeverityMedium |
|---|
CVE-2026-115495WatchGuard Mobile VPN with SSL Client exposes VPN credentials through cleartext loopback traffic | Exploitation statusNot confirmed | FixYes | Affected productMobile VPN with SSL Client | Published10/27/2026 | SeverityMedium |
|---|
CVE-2026-113881Fireware OS Stack Buffer Overflow in VPN Network Access Enforcement Allows Unprivileged Code Execution | Exploitation statusNot confirmed | FixYes | Affected productFireware OS | Published10/27/2026 | SeverityMedium |
|---|
CVE-2026-112710Fireware OS Heap Buffer Overflow in AD Authentication Service Allows Pre-Authentication Remote Code Execution | Exploitation statusNot confirmed | FixYes | Affected productFireware OS | Published10/27/2026 | SeverityCritical |
|---|
CVE-2026-112709Fireware OS Heap Buffer Overflow in AD Authentication Service Allows Pre-Authentication Remote Code Execution | Exploitation statusNot confirmed | FixYes | Affected productFireware OS | Published10/27/2026 | SeverityCritical |
|---|
CVE-2026-111107Fireware OS NULL Pointer Dereference in Management Interface Allows Unauthenticated Denial of Service | Exploitation statusNot confirmed | FixYes | Affected productFireware OS | Published10/27/2026 | SeverityHigh |
|---|
CVE-2026-104381Fireware OS Missing Authentication in FireCluster State Sync Allows BOVPN Tunnel Denial of Service | Exploitation statusNot confirmed | FixYes | Affected productFireware OS | Published10/27/2026 | SeverityMedium |
|---|
CVE-2026-103594Fireware OS Stack Buffer Overflow in WireGuard Configuration Allows Remote Code Execution | Exploitation statusNot confirmed | FixYes | Affected productFireware OS | Published10/27/2026 | SeverityCritical |
|---|
CVE-2026-103593Fireware OS Stack Buffer Overflow in Logging Service Allows Remote Code Execution | Exploitation statusNot exploited | FixYes | Affected productFireware OS | Published10/27/2026 | SeverityCritical |
|---|
CVE-2026-96293Endpoint Security Cleartext Storage of FileVault Recovery Key in Log File | Exploitation statusNot exploited | FixYes | Affected productWatchGuard Agent | Published10/22/2026 | SeverityMedium |
|---|
CVE-2026-115253WatchGuard Agent Incorrect Permission Assignment in Log Directory Allows Local Log Tampering | Exploitation statusNot exploited | FixYes | Affected productWatchGuard Agent | Published10/22/2026 | SeverityHigh |
|---|
CVE-2026-13043WatchGuard Endpoint Security Missing Authentication in Kernel Memory Access Driver Allows Arbitrary Kernel Memory Access | Exploitation statusNot exploited | FixYes | Affected productEndpoint Security | Published10/01/2026 | SeverityCritical |
|---|
CVE-2026-86134Fireware OS Pre-Authentication NULL Pointer Dereference Allows Remote Denial of Service | Exploitation statusNot exploited | FixYes | Affected productFireware OS | Published09/30/2026 | SeverityHigh |
|---|
CVE-2026-90441Fireware OS Missing Authorization in wgagent Management API Allows Denial of Service - Variant B | Exploitation statusNot exploited | FixYes | Affected productFireware OS | Published09/29/2026 | SeverityHigh |
|---|
CVE-2026-86136Fireware OS Missing Authorization in wgagent Management API Allows Denial of Service - Variant A | Exploitation statusNot exploited | FixYes | Affected productFireware OS | Published09/29/2026 | SeverityHigh |
|---|
CVE-2026-86133Fireware OS Pre-Authentication Integer Underflow in iked Allows Remote Denial of Service | Exploitation statusNot exploited | FixYes | Affected productFireware OS | Published09/29/2026 | SeverityHigh |
|---|
CVE-2026-86132Fireware OS Pre-Authentication Integer Underflow in iked Allows Denial of Service | Exploitation statusNot exploited | FixYes | Affected productFireware OS | Published09/29/2026 | SeverityHigh |
|---|
CVE-2026-86131Fireware OS Code Injection in BOVPN Over TLS Client Allows Remote Code Execution | Exploitation statusNot exploited | FixYes | Affected productFireware OS | Published09/29/2026 | SeverityCritical |
|---|
CVE-2026-86128Fireware OS NULL Pointer Dereference in NetFlow IPv6 Traffic Processing Allows Remote Denial of Service | Exploitation statusNot exploited | FixYes | Affected productFireware OS | Published09/29/2026 | SeverityHigh |
|---|
CVE-2026-86105Fireware OS Improper Authorization in Access Portal Reverse Proxy | Exploitation statusNot exploited | FixYes | Affected productFireware OS | Published09/29/2026 | SeverityMedium |
|---|
CVE-2026-86104Fireware OS Resource Exhaustion in Login Process Allows Denial of Service | Exploitation statusNot exploited | FixYes | Affected productFireware OS | Published09/29/2026 | SeverityHigh |
|---|
CVE-2026-86101Fireware OS Authorization Bypass in SAML Login Allows Unauthorized SSLVPN Access | Exploitation statusNot exploited | FixYes | Affected productFireware OS | Published09/29/2026 | SeverityHigh |
|---|
CVE-2026-81433Fireware OS Pre-Authentication Stack Buffer Overflow in fingerd Allows Remote Code Execution | Exploitation statusNot exploited | FixYes | Affected productFireware OS | Published09/29/2026 | SeverityHigh |
|---|
CVE-2026-18145Fireware OS Stack-based Buffer Overflow in spamd Allows Remote Code Execution | Exploitation statusNot exploited | FixYes | Affected productFireware OS | Published09/29/2026 | SeverityHigh |
|---|
CVE-2026-18105Fireware OS Uncontrolled Resource Consumption in Diagnostic Tasks Allows Denial of Service | Exploitation statusNot exploited | FixYes | Affected productFireware OS | Published09/29/2026 | SeverityHigh |
|---|
CVE-2026-13224Fireware OS Path Traversal in WebUI Management Agent Allows Arbitrary Local File Read | Exploitation statusNot exploited | FixYes | Affected productFireware OS | Published09/29/2026 | SeverityHigh |
|---|
CVE-2026-13046Fireware OS Deserialization of Untrusted Data in samld Allows Remote Code Execution | Exploitation statusNot exploited | FixYes | Affected productFireware OS | Published09/29/2026 | SeverityHigh |
|---|
CVE-2026-87969WatchGuard AP Authenticated Command Injection in Diagnostic CLI | Exploitation statusNot exploited | FixYes | Affected productWatchGuard AP | Published09/28/2026 | SeverityHigh |
|---|
CVE-2026-86102WatchGuard AP Command Injection in Internal Management API Allows Command Execution | Exploitation statusNot exploited | FixYes | Affected productWatchGuard AP | Published09/28/2026 | SeverityCritical |
|---|
CVE-2026-101891WatchGuard AP Improper Access Control in API Service Allows Unauthenticated Access | Exploitation statusNot exploited | FixYes | Affected productWatchGuard AP | Published09/28/2026 | SeverityCritical |
|---|
CVE-2026-95676AuthPoint Gateway Improper Authentication in LDAP Sync Allows First-Factor Authentication Bypass | Exploitation statusNot exploited | FixYes | Affected productAuthPoint Authentication Gateway | Published09/23/2026 | SeverityHigh |
|---|
CVE-2026-86135Dimension CSRF Vulnerability in Database Snapshot Creation Allows Denial of Service | Exploitation statusNot exploited | FixYes | Affected productDimension | Published09/08/2026 | SeverityHigh |
|---|
CVE-2026-81851Fireware OS Heap-Based Buffer Overflow in iked Allows Denial of Service | Exploitation statusNot exploited | FixYes | Affected productFireware OS | Published08/27/2026 | SeverityMedium |
|---|
CVE-2026-78618Dimension Business Logic Flaw Allows Chained Backend Object Operations | Exploitation statusNot exploited | FixYes | Affected productDimension | Published08/27/2026 | SeverityMedium |
|---|
CVE-2026-78617WatchGuard Dimension Web UI Authentication Brute-Force Due to Missing Rate Limiting | Exploitation statusNot exploited | FixYes | Affected productDimension | Published08/27/2026 | SeverityMedium |
|---|
CVE-2026-78616Dimension Stored XSS via Trusted CA Certificate Configuration | Exploitation statusNot exploited | FixYes | Affected productDimension | Published08/27/2026 | SeverityMedium |
|---|
CVE-2026-78615WatchGuard Dimension Reflected DOM-Based XSS in Report Detail Page | Exploitation statusNot exploited | FixYes | Affected productDimension | Published08/27/2026 | SeverityMedium |
|---|
138 Results | Page 1 of 3