Firebox

Search everything

Mentions · 7d1
Mentions · 30d1
All mentions4
First seenSep 10, 2026
Last mentioned1d ago

Timeline

4 articles · newest first

WatchGuard discloses seven critical Fireware OS flaws enabling remote code execution

Supplied data names Fireware OS 2026.4 and 12.12.4 as fixes; this report does not establish exploitation.

Cyber Security NewsOct 29, 03:08 UTC · 1d agoVulnerabilityCVE-2026-103594 CVE-2026-112709 CVE-2026-112710+62

WatchGuard fixes critical Fireware OS flaw allowing remote code execution

WatchGuard patched 15 Fireware OS bugs, including critical root RCE CVE-2026-86131 on Firebox VPN clients.

Security AffairsSep 30, 19:29 UTC · Sep 30, 2026VulnerabilityCVE-2026-86131 CVE-2026-86101 CVE-2026-814333 · 1 read

WatchGuard Patches Critical Fireware OS Code Injection Vulnerability

WatchGuard patched critical Fireware OS code injection that could give remote attackers root on Firebox appliances.

SecurityWeekSep 30, 13:16 UTC · Sep 30, 2026VulnerabilityCVE-2026-86131 CVE-2026-101891 CVE-2026-861022 · 1 read

CISA: WatchGuard RCE flaw now exploited in ransomware attacks

CISA confirms ransomware gangs are exploiting critical unauthenticated RCE CVE-2025-14733 in WatchGuard Firebox firewalls, with roughly 9,000 devices still unpatched.

BleepingComputerSep 10, 09:10 UTC · Sep 10, 2026Exploit / PoCExploitedCVE-2025-14733 CVE-2022-23176 CVE-2025-92422

Related CVEs

by mentions

CVE-2026-861319.2
Root code injection in WatchGuard Fireware BOVPN Over TLS
published Sep 30, 2026WatchGuard Fireware OS
CVE-2025-1473329%9.3
Unauthenticated Out-of-Bounds Write RCE in WatchGuard Fireware OS
published Dec 19, 2025WatchGuard Firebox (Fireware OS)KEVRansomware
CVE-2025-924292%9.3
Out-of-Bounds Write in WatchGuard Fireware OS iked Enables Unauthenticated RCE
published Sep 17, 2025WatchGuard Firebox appliances running Fireware OS (iked process)KEVPoC
CVE-2022-2317611%8.8
Privilege Escalation in WatchGuard Firebox/XTM Fireware OS
published Feb 24, 2022WatchGuard Firebox and XTM appliances (Fireware OS)KEV
CVE-2026-1018919.3
Unauthenticated API session flaw in WatchGuard access points
published Sep 28, 2026WatchGuard Access Points
CVE-2026-938579.2
Unauthenticated stack buffer overflow in Fireware OS SIP proxy
published 3d agoWatchGuard Fireware OS
CVE-2026-1127109.2
Heap buffer overflow in Fireware OS AD authentication
published 3d agoWatchGuard Fireware OS
CVE-2026-938669.2
Heap overflow in WatchGuard Fireware Access Portal WebSocket
published 3d agoWatchGuard Fireware OS
CVE-2026-904647.2
Authenticated arbitrary file overwrite in WatchGuard Fireware OS CLI
published 3d agoWatchGuard Fireware OS
CVE-2026-938647.1
Link-following file overwrite in WatchGuard Fireware OS
published 3d agoWatchGuard Fireware OS

Appears with

Fireware OSproduct · 4
WatchGuardvendor · 4
CISAorganization · 1
Windows Mobile VPN with SSLproduct · 1
WatchGuard Access Pointproduct · 1
WatchGuardorganization · 1
Shadowserverorganization · 1

Entities are extracted by the model from each article. First seen Sep 10, 2026, last mentioned 1d ago. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.