Cisco and WatchGuard release patches; SonicWall leaves GMS unpatched
SonicWall will not patch two critical flaws in its end-of-life Global Management System.
1
Stories per day · 30 days
4 RSS
Relatedauthentication-gateway1authpoint1buffer-overflow1canada1certificate-validation1cisco1credential-theft1firewall1fireware1fireware-os1huntress1ldap1phishing1rce1remote-code-execution1seo-poisoning1sonicwall1sql-injection1
18 stories, newest first · one card per story
Stories tagged #watchguard
WatchGuard AuthPoint Gateway affected by four vulnerabilities
CVEs allow forged LDAP authentication, MITM attacks, unauthenticated DoS, and unauthorized admin actions prior to 7.6.0.
WatchGuard discloses seven critical Fireware OS flaws enabling remote code execution
Supplied data names Fireware OS 2026.4 and 12.12.4 as fixes; this report does not establish exploitation.
2
WatchGuard Fireware OS and SSL VPN client affected by vulnerabilities
Canada’s October 28 notice lists Fireware OS and Mobile VPN with SSL Client builds before 2026.4 and 12.0, without naming CVEs.
Fake WatchGuard VPN Site Steals Credentials
Huntress found a WatchGuard lookalike that phished VPN server, login, and password via SEO poisoning.
3
Critical WatchGuard Endpoint Security Flaw Exposes Kernel and Process Memory
CVE-2026-13043 lets local users bypass WatchGuard's PSKMAD driver checks and read kernel and process memory.
3
WatchGuard security advisory (AV26-990)
WatchGuard Endpoint Security kernel driver flaw CVE-2026-13043 allows arbitrary kernel memory access.
WatchGuard security advisory (AV26-981)
Canadian Cyber Centre advisory flags CVE-2026-86134, a pre-authentication remote denial-of-service flaw in WatchGuard Fireware OS, urging users to patch.
WatchGuard fixes critical Fireware OS flaw allowing remote code execution
WatchGuard patched 15 Fireware OS bugs, including critical root RCE CVE-2026-86131 on Firebox VPN clients.
4
WatchGuard Patches Critical Fireware OS Code Injection Vulnerability
WatchGuard patched critical Fireware OS code injection that could give remote attackers root on Firebox appliances.
2
ZDI-26-750: WatchGuard FireWare OS spamd statushdlr Stack-based Buffer Overflow Remote Code Execution Vulnerability
Authenticated stack buffer overflow in WatchGuard Fireware OS spamd allows remote code execution (CVE-2026-18145).
WatchGuard security advisory (AV26-972)
Canadian Cyber Centre relayed three WatchGuard AP vulnerabilities, including unauthenticated API access and command injection, fixed before version 3.4.8.
Critical WatchGuard AP Flaws Let Unauthenticated Attackers Execute Arbitrary Commands
WatchGuard patched two unauthenticated critical AP flaws enabling remote command execution and API access.
5
Critical WatchGuard API Vulnerabilities Enables Command Execution Attacks
WatchGuard patched three AP vulnerabilities, including two unauthenticated critical flaws with CVSS 9.3, in firmware version 3.4.8.
3
CISA: WatchGuard RCE flaw now exploited in ransomware attacks
CISA confirms ransomware gangs are exploiting critical unauthenticated RCE CVE-2025-14733 in WatchGuard Firebox firewalls, with roughly 9,000 devices still unpatched.
2
ZDI-26-632: WatchGuard FireWare OS epm connect Stack-based Buffer Overflow Remote Code Execution Vulnerability
ZDI disclosed a CVSS 8.8 unauthenticated stack-based buffer overflow in WatchGuard FireWare OS epm connect enabling network-adjacent remote code execution.
WatchGuard security advisory (AV26-865)
Canada's Cyber Centre warns WatchGuard Dimension and Fireware OS vulnerabilities affect multiple versions and urges administrators to apply available updates.
WatchGuard security advisory (AV26-847)
Canada's Cyber Centre advises that WatchGuard Agent versions before 1.25.13.0000 are affected by vulnerabilities and urges administrators to apply updates.