VulnerabilitycriticalExploited in the wild

WatchGuard Warns of Active Exploitation of Critical Fireware OS VPN Vulnerability

The Hacker Newsby @TheHackersNewsDec 23, 2025 · 04:10 UTC (Dec 23, 2025)3 min read1 · 1 read

Read at thehackernews.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2025-14733 CVE-2025-59718 CVE-2025-59719 CVE-2025-9242

Tags: cve-2025-14733 cve-2025-59718 cve-2025-59719 cve-2025-9242 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2025-14733	Unauthenticated Out-of-Bounds Write RCE in WatchGuard Fireware OS	9.3	29%	KEVRansomware	Dec 19, 2025 KEV Dec 19, 2025
CVE-2025-59718	Critical FortiCloud SSO Authentication Bypass in Fortinet FortiOS and FortiProxy	9.8	68%	KEV	Dec 9, 2025 KEV Dec 16, 2025
CVE-2025-59719	Unauthenticated SAML Signature Bypass in Fortinet FortiWeb (FortiCloud SSO)	9.8	29%		Dec 9, 2025
CVE-2025-9242	Out-of-Bounds Write in WatchGuard Fireware OS iked Enables Unauthenticated RCE	9.3	92%	KEVPoC	Sep 17, 2025 KEV Nov 12, 2025

From the original article

3 min read at thehackernews.com

 Ravie Lakshmanan  Dec 19, 2025 Vulnerability / Network Security WatchGuard has released fixes to address a critical security flaw in Fireware OS that it said has been exploited in real-world attacks. Tracked as CVE-2025-14733 (CVSS score: 9.

The Hacker News

By @TheHackersNews · thehackernews.com

Read the full article at The Hacker News

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.