en
Severity across 60 analyzed records
A short verification protects source data and prevents automated AI requests.
The GCVE catalog currently lists 114 vulnerability records associated with WatchGuard.
Among the 60 records analyzed by CyStack, 36 are High or Critical and 2 appear in the CISA KEV catalog for priority remediation.
The list below is based on vulnerabilities that have been viewed and analyzed; it does not represent the complete global vulnerability corpus. Use the product filter to narrow the scope.
| CVE | Exploitation status | Fix | Affected product | Published | Severity |
|---|---|---|---|---|---|
CVE-2026-86135Dimension CSRF Vulnerability in Database Snapshot Creation Allows Denial of Service | Exploitation statusNot known exploited | FixYes | Affected productDimension | Published09/08/2026 | SeverityHigh |
CVE-2026-78616Dimension Stored XSS via Trusted CA Certificate Configuration | Exploitation statusNot known exploited | FixYes | Affected productDimension | Published08/27/2026 | SeverityMedium |
CVE-2026-78498Dimension Server-Side Request Forgery via Email Server Test Settings | Exploitation statusNot known exploited | FixYes | Affected productDimension | Published08/27/2026 | SeverityMedium |
CVE-2026-78195CVE-2026-78195 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published08/27/2026 | SeverityUnknown |
CVE-2026-78612Dimension SQL Injection in Scheduled Report | Exploitation statusNot known exploited | FixYes | Affected productDimension | Published08/27/2026 | SeverityHigh |
CVE-2026-78103Dimension Log Server Configuration Lock Bypass Vulnerability | Exploitation statusNot known exploited | FixYes | Affected productDimension | Published08/27/2026 | SeverityMedium |
CVE-2026-78615WatchGuard Dimension Reflected DOM-Based XSS in Report Detail Page | Exploitation statusNot known exploited | FixYes | Affected productDimension | Published08/27/2026 | SeverityMedium |
CVE-2026-78613Dimension SQL Injection in Log Viewer | Exploitation statusNot known exploited | FixYes | Affected productDimension | Published08/27/2026 | SeverityHigh |
CVE-2026-78495Dimension Server-Side Request Forgery via Remote Backup Connection Test | Exploitation statusNot known exploited | FixYes | Affected productDimension | Published08/27/2026 | SeverityMedium |
CVE-2026-78617WatchGuard Dimension Web UI Authentication Brute-Force Due to Missing Rate Limiting | Exploitation statusNot known exploited | FixYes | Affected productDimension | Published08/27/2026 | SeverityMedium |
CVE-2026-78047Dimension Stored XSS in Scheduled Report Task | Exploitation statusNot known exploited | FixYes | Affected productDimension | Published08/27/2026 | SeverityMedium |
CVE-2026-78610Dimension CSRF Vulnerability in Administrator Passphrase Change Endpoint | Exploitation statusNot known exploited | FixYes | Affected productDimension | Published08/27/2026 | SeverityHigh |
CVE-2026-78499Dimension SSRF via FTP Server Test Connection | Exploitation statusNot known exploited | FixYes | Affected productDimension | Published08/27/2026 | SeverityMedium |
CVE-2026-78174WatchGuard Dimension Session Hijack via Exposed Session Tokens in Diagnostic Logs | Exploitation statusNot known exploited | FixYes | Affected productDimension | Published08/27/2026 | SeverityCritical |
CVE-2026-78618Dimension Business Logic Flaw Allows Chained Backend Object Operations | Exploitation statusNot known exploited | FixYes | Affected productDimension | Published08/27/2026 | SeverityMedium |
CVE-2026-78500Dimension Blind SSRF via Database Test Connection Feature | Exploitation statusNot known exploited | FixYes | Affected productDimension | Published08/27/2026 | SeverityMedium |
CVE-2026-13108Dimension Denial-of-Service | Exploitation statusNot known exploited | FixYes | Affected productDimension | Published08/27/2026 | SeverityHigh |
CVE-2026-78614Dimension SQL Injection in Audit Report | Exploitation statusNot known exploited | FixYes | Affected productDimension | Published08/27/2026 | SeverityHigh |
CVE-2026-19315Fireware OS Pre-Authentication Type Confusion in iked Allows Remote Code Execution | Exploitation statusNot known exploited | FixYes | Affected productFireware OS | Published08/27/2026 | SeverityCritical |
CVE-2026-19314Fireware OS Integer Underflow in iked Allows Unauthenticated Denial of Service (DoS) | Exploitation statusNot known exploited | FixYes | Affected productFireware OS | Published08/27/2026 | SeverityHigh |
CVE-2026-19317Fireware OS Pre-Authentication Out-of-Bounds Read in iked Allows Denial of Service (DoS) | Exploitation statusNot known exploited | FixYes | Affected productFireware OS | Published08/27/2026 | SeverityHigh |
CVE-2026-78011Fireware OS Integer Underflow in Iked Allows Unauthenticated Denial of Service (DoS) | Exploitation statusNot known exploited | FixYes | Affected productFireware OS | Published08/27/2026 | SeverityHigh |
CVE-2026-78010Fireware OS Stack-Based Buffer Overflow in iked Allows Unauthenticated Denial of Service | Exploitation statusNot known exploited | FixYes | Affected productFireware OS | Published08/27/2026 | SeverityHigh |
CVE-2026-13086Fireware OS Stack-Based Buffer Overflow in Mobile Security epm Endpoint | Exploitation statusNot known exploited | FixYes | Affected productFireware OS | Published08/27/2026 | SeverityCritical |
CVE-2026-19313Fireware OS Pre-Authentication Heap Buffer Overflow in iked Allows Remote Code Execution | Exploitation statusNot known exploited | FixYes | Affected productFireware OS | Published08/27/2026 | SeverityCritical |
CVE-2026-19316Fireware OS Pre-Authentication Double Free in iked Allows Denial of Service (DoS) | Exploitation statusNot known exploited | FixYes | Affected productFireware OS | Published08/27/2026 | SeverityHigh |
CVE-2026-78009Fireware OS Out-of-Bounds Read in iked Allows Unauthenticated Denial of Service (DoS) | Exploitation statusNot known exploited | FixYes | Affected productFireware OS | Published08/27/2026 | SeverityHigh |
CVE-2026-19318Fireware OS Pre-Authentication Stack Buffer Overflow in iked Allows Remote Code Execution | Exploitation statusNot known exploited | FixYes | Affected productFireware OS | Published08/27/2026 | SeverityCritical |
CVE-2026-78008Fireware OS Authenticated Buffer Overflow in wgagent | Exploitation statusNot known exploited | FixYes | Affected productFireware OS | Published08/27/2026 | SeverityHigh |
CVE-2026-81851Fireware OS Heap-Based Buffer Overflow in iked Allows Denial of Service | Exploitation statusNot known exploited | FixYes | Affected productFireware OS | Published08/27/2026 | SeverityMedium |
CVE-2026-57910WatchGuard Agent improper authentication allows unauthenticated remote code execution | Exploitation statusNot known exploited | FixYes | Affected productWatchGuard Agent | Published08/25/2026 | SeverityCritical |
CVE-2026-57909WatchGuard Agent path traversal allows unauthenticated remote code execution | Exploitation statusNot known exploited | FixYes | Affected productWatchGuard Agent | Published08/25/2026 | SeverityCritical |
CVE-2026-13079WatchGuard Mobile VPN with SSL Windows Client Local Privilege Escalation | Exploitation statusNot known exploited | FixYes | Affected productMobile VPN with SSL Client | Published07/02/2026 | SeverityHigh |
CVE-2026-13722WatchGuard Firebox Firmware Image Validation Bypass in WatchGuard Fireware OS | Exploitation statusNot known exploited | FixYes | Affected productFireware OS | Published07/02/2026 | SeverityHigh |
CVE-2026-6788Uncontrolled search path in PluginLauncher allows SYSTEM code execution in WatchGuard Agent | Exploitation statusNot known exploited | FixYes | Affected productWatchGuard Agent | Published05/06/2026 | SeverityHigh |
CVE-2026-6787Usage of a hard-coded cryptographic key in WatchGuard Agent allows inclusion of code into existing process | Exploitation statusNot known exploited | FixYes | Affected productWatchGuard Agent | Published05/06/2026 | SeverityHigh |
CVE-2026-41286Stack-based Buffer Overflow in WatchGuard Agent Discovery Service on Windows Causes Denial of Service - Variant B | Exploitation statusNot known exploited | FixYes | Affected productWatchGuard Agent | Published05/06/2026 | SeverityHigh |
CVE-2026-41288WatchGuard Agent on Windows Privilege Escalation Vulnerability | Exploitation statusNot known exploited | FixYes | Affected productWatchGuard Agent | Published05/06/2026 | SeverityHigh |
CVE-2026-41287Stack-based Buffer Overflow in WatchGuard Agent Discovery Service on Windows Causes Denial of Service - Variant A | Exploitation statusNot known exploited | FixYes | Affected productWatchGuard Agent | Published05/06/2026 | SeverityHigh |
CVE-2026-3342WatchGuard Firebox Out of Bounds Write Vulnerability | Exploitation statusNot known exploited | FixYes | Affected productFireware OS | Published03/03/2026 | SeverityHigh |
CVE-2026-1498WatchGuard Firebox LDAP Injection | Exploitation statusNot known exploited | FixYes | Affected productFireware OS | Published01/30/2026 | SeverityHigh |
CVE-2025-1910WatchGuard Mobile VPN with SSL Local Privilege Escalation via Update Package | Exploitation statusNot known exploited | FixYes | Affected productMobile VPN with SSL Client | Published12/04/2025 | SeverityMedium |
CVE-2025-1549WatchGuard Mobile VPN with SSL Local Privilege Escallation | Exploitation statusNot known exploited | FixYes | Affected productMobile VPN with SSL Client | Published10/29/2025 | SeverityMedium |
CVE-2025-4106WatchGuard Firebox leftover debug code vulnerability | Exploitation statusNot known exploited | FixYes | Affected productFireware OS | Published10/24/2025 | SeverityHigh |
CVE-2025-6947WatchGuard Firebox Stored Cross-Site-Scripting (XSS) Vulnerability in SIP Proxy Configuration | Exploitation statusNot known exploited | FixYes | Affected productFireware OS | Published09/15/2025 | SeverityMedium |
CVE-2025-6999WatchGuard Firebox Authentication Portal Request Smuggling Vulnerability | Exploitation statusNot known exploited | FixYes | Affected productFireware OS | Published09/15/2025 | SeverityMedium |
CVE-2025-4805WatchGuard Firebox Stored Cross-Site-Scripting (XSS) Vulnerability in Acces Portal Configuration | Exploitation statusNot known exploited | FixYes | Affected productFireware OS | Published05/16/2025 | SeverityMedium |
CVE-2025-4804WatchGuard Firebox Stored Cross-Site-Scripting (XSS) Vulnerability in Hotpot Configuration | Exploitation statusNot known exploited | FixYes | Affected productFireware OS | Published05/16/2025 | SeverityMedium |
CVE-2025-2782WatchGuard Terminal Services Agent Local Privilege Escalation via Non-Standard Installation Directory | Exploitation statusNot known exploited | FixYes | Affected productSSO Terminal Services Agent | Published03/28/2025 | SeverityMedium |
CVE-2025-2781WatchGuard Mobile VPN with SSL Local Privilege Escalation via Non-Standard Installation Directory | Exploitation statusNot known exploited | FixYes | Affected productMobile VPN with SSL Client | Published03/28/2025 | SeverityMedium |
CVE-2025-1239WatchGuard Firebox Stored Cross-Site-Scripting (XSS) Vulnerability in Blocked Sites List | Exploitation statusNot known exploited | FixYes | Affected productFireware OS | Published02/14/2025 | SeverityMedium |
CVE-2022-31749Authenticated arbitrary file read/write in WatchGuard Fireware OS | Exploitation statusPublic exploit | FixYes | Affected productFireware OS | Published01/27/2025 | SeverityMedium |
CVE-2024-13043Panda Security Dome Link Following Local Privilege Escalation Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Affected productDome | Published12/30/2024 | SeverityHigh |
CVE-2024-8424WatchGuard Endpoint Protection Privilege Escalation in PSANHost Enables Arbitrary File Delete as SYSTEM | Exploitation statusNot known exploited | FixYes | Affected productEndpoint Security | Published11/07/2024 | SeverityHigh |
CVE-2024-6594WatchGuard Firebox Single Sign-On Client Denial-of-Service | Exploitation statusNot known exploited | FixYes | Affected productSSO Client | Published09/25/2024 | SeverityHigh |
CVE-2024-6593WatchGuard Firebox Single Sign-On Agent Management Interface Authentication Bypass | Exploitation statusNot known exploited | FixYes | Affected productSSO Agent | Published09/25/2024 | SeverityCritical |
CVE-2024-6592WatchGuard Firebox Single Sign-On Agent Protocol Authorization Bypass | Exploitation statusNot known exploited | FixYes | Affected productSSO Client | Published09/25/2024 | SeverityCritical |
CVE-2024-4944Mobile VPN with SSL Local Privilege Escalation Vulnerability | Exploitation statusNot known exploited | FixYes | Affected productMobile VPN with SSL Client | Published07/09/2024 | SeverityHigh |
CVE-2024-1417Local Code Injection Vulnerability in AuthPoint Password Manager App for macOS Safari | Exploitation statusNot known exploited | FixYes | Affected productAuthPoint Password Manager | Published05/16/2024 | SeverityHigh |
CVE-2024-3661DHCP routing options can manipulate interface-based VPN traffic | Exploitation statusNot known exploited | FixNot confirmed | Affected productDHCP | Published05/06/2024 | SeverityHigh |
CVE-2023-37849CVE-2023-37849 | Exploitation statusPublic exploit | FixNot confirmed | Affected productNot confirmed | Published07/13/2023 | SeverityUnknown |
CVE-2022-31791CVE-2022-31791 | Exploitation statusNot confirmed | FixYes | Affected productNot confirmed | Published09/06/2022 | SeverityUnknown |
CVE-2022-31792CVE-2022-31792 | Exploitation statusNot confirmed | FixYes | Affected productNot confirmed | Published09/06/2022 | SeverityUnknown |
CVE-2022-31789CVE-2022-31789 | Exploitation statusNot confirmed | FixYes | Affected productNot confirmed | Published09/06/2022 | SeverityUnknown |
CVE-2022-31790CVE-2022-31790 | Exploitation statusNot confirmed | FixYes | Affected productNot confirmed | Published09/06/2022 | SeverityUnknown |
CVE-2022-26318CVE-2022-26318 | Exploitation statusKEV | FixNot confirmed | Affected productNot confirmed | Published03/04/2022 | SeverityCritical |
CVE-2022-25291CVE-2022-25291 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published02/24/2022 | SeverityUnknown |
CVE-2022-25290CVE-2022-25290 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published02/24/2022 | SeverityUnknown |
CVE-2022-25363CVE-2022-25363 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published02/24/2022 | SeverityUnknown |
CVE-2022-25293CVE-2022-25293 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published02/24/2022 | SeverityUnknown |
CVE-2022-25292CVE-2022-25292 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published02/24/2022 | SeverityUnknown |
CVE-2022-25360CVE-2022-25360 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published02/24/2022 | SeverityUnknown |
CVE-2022-23176CVE-2022-23176 | Exploitation statusKEV | FixNot confirmed | Affected productNot confirmed | Published02/24/2022 | SeverityHigh |
CVE-2021-34998CVE-2021-34998 | Exploitation statusNot confirmed | FixNot confirmed | Affected productFree Antivirus | Published01/13/2022 | SeverityHigh |
CVE-2020-10532CVE-2020-10532 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published03/12/2020 | SeverityUnknown |
CVE-2014-6413CVE-2014-6413 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published02/07/2020 | SeverityUnknown |
CVE-2016-6154CVE-2016-6154 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published08/23/2019 | SeverityUnknown |
CVE-2015-2878CVE-2015-2878 | Exploitation statusPublic exploit | FixNot confirmed | Affected productNot confirmed | Published10/23/2017 | SeverityUnknown |
CVE-2017-14616CVE-2017-14616 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published09/20/2017 | SeverityUnknown |
CVE-2017-14615CVE-2017-14615 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published09/20/2017 | SeverityUnknown |
CVE-2017-8060CVE-2017-8060 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published05/05/2017 | SeverityUnknown |
CVE-2017-8339CVE-2017-8339 | Exploitation statusPublic exploit | FixNot confirmed | Affected productNot confirmed | Published04/30/2017 | SeverityUnknown |
CVE-2017-8056CVE-2017-8056 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published04/22/2017 | SeverityUnknown |
CVE-2017-8055CVE-2017-8055 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published04/22/2017 | SeverityUnknown |
CVE-2016-7089CVE-2016-7089 | Exploitation statusPublic exploit | FixNot confirmed | Affected productNot confirmed | Published08/24/2016 | SeverityUnknown |
CVE-2016-3943CVE-2016-3943 | Exploitation statusPublic exploit | FixNot confirmed | Affected productNot confirmed | Published04/18/2016 | SeverityUnknown |
CVE-2015-7378CVE-2015-7378 | Exploitation statusPublic exploit | FixNot confirmed | Affected productNot confirmed | Published04/18/2016 | SeverityUnknown |
CVE-2015-5453CVE-2015-5453 | Exploitation statusPublic exploit | FixNot confirmed | Affected productNot confirmed | Published07/08/2015 | SeverityUnknown |
CVE-2015-5452CVE-2015-5452 | Exploitation statusPublic exploit | FixNot confirmed | Affected productNot confirmed | Published07/08/2015 | SeverityUnknown |
CVE-2014-0338CVE-2014-0338 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published03/16/2014 | SeverityUnknown |
CVE-2013-5702CVE-2013-5702 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published10/19/2013 | SeverityUnknown |
CVE-2013-6021CVE-2013-6021 | Exploitation statusPublic exploit | FixNot confirmed | Affected productNot confirmed | Published10/19/2013 | SeverityUnknown |
CVE-2013-5701CVE-2013-5701 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published10/03/2013 | SeverityUnknown |
CVE-2011-2165CVE-2011-2165 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published05/23/2011 | SeverityUnknown |
CVE-2008-1618CVE-2008-1618 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published04/07/2008 | SeverityUnknown |
CVE-2002-1979CVE-2002-1979 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published06/28/2005 | SeverityUnknown |
CVE-2000-0895CVE-2000-0895 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published09/01/2004 | SeverityUnknown |
CVE-2002-1520CVE-2002-1520 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published09/01/2004 | SeverityUnknown |
CVE-2000-0894CVE-2000-0894 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published09/01/2004 | SeverityUnknown |
CVE-2002-1519CVE-2002-1519 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published09/01/2004 | SeverityUnknown |
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
Explore CyStack VulnScan
