MSRXWatchGuard vulnerabilities being exploited
2 WatchGuard flaws were confirmed exploited in the wild in the past 365 days, 1 used in ransomware, across 1 product: Firebox. If you run any of them, patch these first.
| Added | Exploited vulnerability | Fix by |
|---|---|---|
| 2025-12-19 | CVE-2025-14733 Firebox ransomwareWatchGuard Firebox Out of Bounds Write Vulnerability WatchGuard Fireware OS iked process contains an out of bounds write vulnerability in the OS iked process. This vulnerability may allow a remote unauthenticated attacker to execute arbitrary code and affects both the mobile user VPN with IKEv2 and the branch office VPN using IKEv2 when configured with a dynamic gateway peer. | 2025-12-26 |
| 2025-11-12 | CVE-2025-9242 Firebox WatchGuard Firebox Out-of-Bounds Write Vulnerability WatchGuard Firebox contains an out-of-bounds write vulnerability in the OS iked process that may allow a remote unauthenticated attacker to execute arbitrary code. | 2025-12-03 |
Source: CISA Known Exploited Vulnerabilities catalog 2026.10.29 (live). A listing means some versions are affected: check yours in the advisory. Guidance only.