Login Request a demo
FI
Product
Fireware
by Watchguard · last CVE Sep 30, 2026
On CISA KEVExploited in the wildRansomware-linked
75
CVEs
4
On KEV
9.8
Max CVSS
14
New 30D
Vulnerabilities75In the news10Timeline
Severity mix
Critical 6High 37Medium 29Low 0
Severity
All severities75Critical6High37Medium29Low0
Exploitation
On CISA KEV4Exploited in the wild4
Watch

Add Fireware to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-13939
6.1
0%
Dec 4
WatchGuard Firebox Stored Cross-Site-Scripting (XSS) Vulnerability in Gateway Wireless Controller
Affected: 2025.1 before 2025.1.3; 11.7.2 before 12.11.5; 11.7.2 before 12.5.14
CVE-2025-13938
6.1
0%
Dec 4
WatchGuard Firebox Stored Cross-Site-Scripting (XSS) Vulnerability in Autotask Technology Integration Configuration
Affected: 2025.1 before 2025.1.3; 12.0.0 before 12.11.5; 12.5 before 12.5.14
CVE-2025-13937
6.1
0%
Dec 4
WatchGuard Firebox Stored Cross-Site-Scripting (XSS) Vulnerability in ConnectWise Technology Integration Configuration
Affected: 2025.1 before 2025.1.3; 12.0.0 before 12.11.5; 12.5 before 12.5.14
CVE-2025-13936
6.1
0%
Dec 4
WatchGuard Firebox Stored Cross-Site-Scripting (XSS) Vulnerability in Tigerpaw Technology Integration Configuration
Affected: 2025.1 before 2025.1.3; 12.0.0 before 12.11.5; 12.5 before 12.5.14
CVE-2025-0178
6.1
0%
Feb 14
WatchGaurd Firebox Host Header Injection Vulnerability
Affected: 12.0.0 before 12.11.1; 12.5 before 12.5.13
CVE-2016-6154
6.1
1%
Aug 23
The authentication applet in Watchguard Fireware 11.11 Operating System has reflected XSS (this can also cause an open redirect)
Affected: through 11.11
CVE-2017-14615
6.1
1%
Sep 20
An FBX-5313 issue was discovered in WatchGuard Fireware before 12.0
Affected: through 11.12.4
CVE-2025-13940
5.5
0%
Dec 4
WatchGuard Firebox Boot Time System Integrity Check Bypass
Affected: 2025.1 before 2025.1.3; 12.8.1 before 12.11.5
CVE-2022-31792
5.4
1%
Sep 6
A stored cross-site scripting (XSS) vulnerability exists in the management web interface of WatchGuard Firebox and XTM appliances
Affected: 12.0.0 before 12.1.4; 12.2.0 before 12.5.10; 12.6.1; 12.6.1; 12.6.3; 12.6.4; +4 more
CVE-2017-8056
5.3
5%
Apr 22
WatchGuard Fireware v11.12.1 and earlier mishandles requests referring to an XML External Entity (XXE), in the XML-RPC agent
Affected: through 11.2.1
CVE-2017-8055
5.3
2%
Apr 22
WatchGuard Fireware allows user enumeration, e.g., in the Firebox XML-RPC login handler
Affected: through 11.2.1
CVE-2026-13224
4.9
0%
Sep 29
Fireware OS Path Traversal in WebUI Management Agent Allows Arbitrary Local File Read
Affected: 12.0 before 12.5.21; 12.12 before 12.12.3; 2025.0 before 2026.2.3; 2026.3 before 2026.3.2
CVE-2026-13371
4.9
1%
Jul 2
WatchGuard Firebox Management Web UI Denial of Service via Unsafe Deserialization
Affected: 2025.1 before 2026.2.1; 12.5 before 12.5.19; 12.0 before 12.12.1
CVE-2026-3344
4.9
0%
Mar 3
WatchGuard Firebox System Integrity Check Bypass
Affected: 12.0 before 12.11.8; 12.5.9 before 12.5.17; 2025.1 before 2026.1.2
CVE-2026-13377
4.8
0%
Jul 2
WatchGuard Firebox Stored Cross-Site-Scripting (XSS) Vulnerability in SIP Proxy Configuration
Affected: 12.0 before 12.12.1; 2025.1 before 2026.2.1; 12.5 through 12.5.18
CVE-2026-13376
4.8
0%
Jul 2
WatchGuard Firebox Stored Cross-Site-Scripting (XSS) Vulnerability in spamBlocker Module
Affected: 12.0 before 12.12.1; 2025.1 before 2026.2.1; 12.5 through 12.5.18
CVE-2026-13375
4.8
0%
Jul 2
WatchGuard Firebox Stored Cross-Site-Scripting (XSS) Vulnerability in Autotask Technology Integration Configuration
Affected: 12.4 before 12.12.1; 2025.1 before 2026.2.1; 12.5 through 12.5.18
CVE-2026-13374
4.8
0%
Jul 2
WatchGuard Firebox Stored Cross-Site-Scripting (XSS) Vulnerability in ConnectWise Technology Integration Configuration
Affected: 12.4 before 12.12.1; 2025.1 before 2026.2.1; 12.5 through 12.5.18
CVE-2026-13373
4.8
0%
Jul 2
WatchGuard Firebox Stored Cross-Site-Scripting (XSS) Vulnerability in Tigerpaw Technology Integration Configuration
Affected: 12.4 before 12.12.1; 2025.1 before 2026.2.1; 12.5 through 12.5.18
CVE-2025-6946
4.8
0%
Dec 4
WatchGuard Firebox Stored Cross-Site-Scripting (XSS) Vulnerability in IPS Configuration
Affected: 12.0.0 before 12.11.3; 12.5 before 12.5.13
CVE-2025-1071
4.8
0%
Feb 14
WatchGuard Firebox Stored Cross-Site-Scripting (XSS) Vulnerability in spamBlocker Module
Affected: 12.0.0 before 12.11.1; 12.5 before 12.5.13
CVE-2026-13728
4.4
0%
Jul 2
WatchGuard Firebox Hardcoded Fallback Encryption Key in Access Portal Resource Credential Database
Affected: 12.1 before 12.12.1; 2025.1 before 2026.2.1
CVE-2014-0338
–
2%
Mar 16
Multiple cross-site scripting (XSS) vulnerabilities in the firewall policy management pages in WatchGuard Fireware XTM before 11.8.3 allow remote attackers to inject arbitrary web…
Affected: through 11.8.1; 11.6; 11.6.1; 11.6.3; 11.6.5; 11.6.6; +5 more
CVE-2013-6021
–
12%
Oct 19
Buffer overflow in WGagent in WatchGuard WSM and Fireware before 11.8 allows remote attackers to execute arbitrary code via a long sessionid value in a cookie
Affected: through 11.7.4; 11.0.2; 11.1; 11.2.3; 11.3; 11.3.6; +6 more
CVE-2013-5702
–
1%
Oct 19
Multiple cross-site scripting (XSS) vulnerabilities in WebCenter in WatchGuard WSM and Fireware before 11.8 allow remote attackers to inject arbitrary web script or HTML via…
Affected: through 11.7.4; 11.6; 11.6.1; 11.6.3; 11.6.5; 11.6.6; +3 more
Page 2 of 2 · 75 total
12