{"items":[{"id":"CVE-2026-121637","published":"2026-11-04T14:44:14.610Z","updated":"2026-11-04T18:20:22.014Z","title":"WatchGuard AuthPoint Gateway Improper HMAC Validation in LDAP Authentication Callback Allows Forged Authentication Results","severity":"HIGH","score":8.9,"vendor":"WatchGuard","product":"AuthPoint Authentication Gateway","kev":false,"epss":0.00264,"kevAdded":null},{"id":"CVE-2026-121639","published":"2026-11-04T14:44:14.573Z","updated":"2026-11-04T18:20:22.160Z","title":"WatchGuard AuthPoint Gateway Improper Authentication Allows Unauthenticated Denial of Service","severity":"CRITICAL","score":9.2,"vendor":"WatchGuard","product":"AuthPoint Authentication Gateway","kev":false,"epss":0.00671,"kevAdded":null},{"id":"CVE-2026-121638","published":"2026-11-04T14:44:14.541Z","updated":"2026-11-04T18:20:22.305Z","title":"WatchGuard AuthPoint Gateway Improper Certificate Validation Allows Man-in-the-Middle Attacks","severity":"CRITICAL","score":9.1,"vendor":"WatchGuard","product":"AuthPoint Authentication Gateway","kev":false,"epss":0.00292,"kevAdded":null},{"id":"CVE-2026-121640","published":"2026-11-04T14:44:14.448Z","updated":"2026-11-04T18:20:22.462Z","title":"WatchGuard AuthPoint Gateway Capture-replay Allows Unauthorized Administrative Actions","severity":"CRITICAL","score":9.1,"vendor":"WatchGuard","product":"AuthPoint Authentication Gateway","kev":false,"epss":0.00469,"kevAdded":null},{"id":"CVE-2026-115495","published":"2026-10-27T15:55:13.638Z","updated":"2026-11-04T20:25:58.570Z","title":"Mobile VPN with SSL Client for Windows: Cleartext Transmission of VPN Credentials over Local Management Socket","severity":"MEDIUM","score":5.7,"vendor":"WatchGuard","product":"Mobile VPN with SSL Client","kev":false,"epss":0.00078,"kevAdded":null},{"id":"CVE-2026-90465","published":"2026-10-27T15:52:29.859Z","updated":"2026-10-29T10:45:46.468Z","title":"Fireware OS Missing Authentication in FireCluster Sync Allows Privilege Escalation","severity":"HIGH","score":8.7,"vendor":"WatchGuard","product":"Fireware OS","kev":false,"epss":0.00237,"kevAdded":null},{"id":"CVE-2026-93862","published":"2026-10-27T15:52:28.633Z","updated":"2026-10-29T01:52:05.734Z","title":"Fireware OS Out-of-Bounds Read in FireCluster Sync Allows Denial of Service","severity":"HIGH","score":7.2,"vendor":"WatchGuard","product":"Fireware OS","kev":false,"epss":0.00165,"kevAdded":null},{"id":"CVE-2026-112709","published":"2026-10-27T15:52:28.465Z","updated":"2026-11-04T20:26:06.088Z","title":"Fireware OS Heap Buffer Overflow in AD Authentication Service Allows Pre-Authentication Remote Code Execution","severity":"CRITICAL","score":9.2,"vendor":"WatchGuard","product":"Fireware OS","kev":false,"epss":0.00419,"kevAdded":null},{"id":"CVE-2026-90464","published":"2026-10-27T15:52:28.267Z","updated":"2026-11-04T20:26:11.909Z","title":"Fireware OS Missing Command Validation allows Authenticated Arbitrary File Modification as Root","severity":"HIGH","score":7.2,"vendor":"WatchGuard","product":"Fireware OS","kev":false,"epss":0.00364,"kevAdded":null},{"id":"CVE-2026-103593","published":"2026-10-27T15:52:28.244Z","updated":"2026-10-29T10:45:46.609Z","title":"Fireware OS Stack Buffer Overflow in Logging Service Allows Remote Code Execution","severity":"CRITICAL","score":9.1,"vendor":"WatchGuard","product":"Fireware OS","kev":false,"epss":0.001,"kevAdded":null},{"id":"CVE-2026-113881","published":"2026-10-27T15:52:28.229Z","updated":"2026-11-04T20:26:17.848Z","title":"Fireware OS Stack Buffer Overflow in VPN Network Access Enforcement Allows Unprivileged Code Execution","severity":"MEDIUM","score":6.1,"vendor":"WatchGuard","product":"Fireware OS","kev":false,"epss":0.00356,"kevAdded":null},{"id":"CVE-2026-93434","published":"2026-10-27T15:52:28.182Z","updated":"2026-11-04T20:26:25.084Z","title":"Fireware OS XPath Injection in SSH Authentication Allows Blind Extraction of Configuration Secrets","severity":"HIGH","score":8.7,"vendor":"WatchGuard","product":"Fireware OS","kev":false,"epss":0.00458,"kevAdded":null},{"id":"CVE-2026-90442","published":"2026-10-27T15:52:28.165Z","updated":"2026-11-04T20:26:30.953Z","title":"Fireware OS Authenticated Stack Buffer Overflow in certd Allows Denial of Service","severity":"HIGH","score":8.6,"vendor":"WatchGuard","product":"Fireware OS","kev":false,"epss":0.00243,"kevAdded":null},{"id":"CVE-2026-112710","published":"2026-10-27T15:52:28.053Z","updated":"2026-11-04T20:26:36.741Z","title":"Fireware OS Heap Buffer Overflow in AD Authentication Service Allows Pre-Authentication Remote Code Execution","severity":"CRITICAL","score":9.2,"vendor":"WatchGuard","product":"Fireware OS","kev":false,"epss":0.00419,"kevAdded":null},{"id":"CVE-2026-82332","published":"2026-10-27T15:52:27.999Z","updated":"2026-11-04T20:26:44.262Z","title":"Fireware OS Improper Authentication in AuthPoint MFA Verification Allows Session Hijacking","severity":"MEDIUM","score":5.6,"vendor":"WatchGuard","product":"Fireware OS","kev":false,"epss":0.00116,"kevAdded":null},{"id":"CVE-2026-93857","published":"2026-10-27T15:52:27.970Z","updated":"2026-10-29T10:45:46.751Z","title":"Fireware OS Pre-Authentication Stack Buffer Overflow in SIP Proxy Allows Remote Code Execution","severity":"CRITICAL","score":9.2,"vendor":"WatchGuard","product":"Fireware OS","kev":false,"epss":0.00557,"kevAdded":null},{"id":"CVE-2026-93866","published":"2026-10-27T15:52:27.871Z","updated":"2026-11-04T20:26:51.215Z","title":"Fireware OS Pre-Authentication Integer Overflow in Access Portal Allows Out-of-Bounds Write","severity":"CRITICAL","score":9.2,"vendor":"WatchGuard","product":"Fireware OS","kev":false,"epss":0.00509,"kevAdded":null},{"id":"CVE-2026-93864","published":"2026-10-27T15:52:27.765Z","updated":"2026-10-29T10:45:46.897Z","title":"Fireware OS Link Following in firewalld Allows Local Arbitrary File Overwrite as Root","severity":"HIGH","score":7.1,"vendor":"WatchGuard","product":"Fireware OS","kev":false,"epss":0.00133,"kevAdded":null},{"id":"CVE-2026-103594","published":"2026-10-27T15:52:27.758Z","updated":"2026-11-04T20:26:57.803Z","title":"Fireware OS Stack Buffer Overflow in WireGuard Configuration Allows Remote Code Execution","severity":"CRITICAL","score":9.5,"vendor":"WatchGuard","product":"Fireware OS","kev":false,"epss":0.00432,"kevAdded":null},{"id":"CVE-2026-104381","published":"2026-10-27T15:52:27.697Z","updated":"2026-11-04T20:27:05.506Z","title":"Fireware OS Missing Authentication in FireCluster State Sync Allows BOVPN Tunnel Denial of Service","severity":"MEDIUM","score":6,"vendor":"WatchGuard","product":"Fireware OS","kev":false,"epss":0.00133,"kevAdded":null},{"id":"CVE-2026-111107","published":"2026-10-27T15:52:27.690Z","updated":"2026-11-04T20:27:15.164Z","title":"Fireware OS NULL Pointer Dereference in Management Interface Allows Unauthenticated Denial of Service","severity":"HIGH","score":8.7,"vendor":"WatchGuard","product":"Fireware OS","kev":false,"epss":0.00355,"kevAdded":null},{"id":"CVE-2026-93865","published":"2026-10-27T15:52:27.668Z","updated":"2026-10-29T10:45:47.040Z","title":"Fireware OS Missing Authentication in FireCluster Sync Daemon Allows Remote Root Action Injection","severity":"CRITICAL","score":9.2,"vendor":"WatchGuard","product":"Fireware OS","kev":false,"epss":0.00463,"kevAdded":null},{"id":"CVE-2026-115253","published":"2026-10-22T08:39:45.537Z","updated":"2026-10-23T03:55:18.131Z","title":"WatchGuard Agent Incorrect Permission Assignment in Log Directory Allows Local Log Tampering","severity":"HIGH","score":7.3,"vendor":"WatchGuard","product":"WatchGuard Agent","kev":false,"epss":0.00129,"kevAdded":null},{"id":"CVE-2026-96293","published":"2026-10-22T08:38:36.895Z","updated":"2026-10-23T08:01:38.060Z","title":"Endpoint Security Cleartext Storage of FileVault Recovery Key in Log File","severity":"MEDIUM","score":6.9,"vendor":"WatchGuard","product":"WatchGuard Agent","kev":false,"epss":0.00062,"kevAdded":null},{"id":"CVE-2026-13043","published":"2026-10-01T16:07:29.080Z","updated":"2026-10-01T16:31:34.559Z","title":"WatchGuard Endpoint Security Missing Authentication in Kernel Memory Access Driver Allows Arbitrary Kernel Memory Access","severity":"CRITICAL","score":9.3,"vendor":"WatchGuard","product":"Endpoint Security","kev":false,"epss":0.00149,"kevAdded":null},{"id":"CVE-2026-86134","published":"2026-09-30T03:37:57.268Z","updated":"2026-09-30T14:38:30.274Z","title":"Fireware OS Pre-Authentication NULL Pointer Dereference Allows Remote Denial of Service","severity":"HIGH","score":8.7,"vendor":"WatchGuard","product":"Fireware OS","kev":false,"epss":0.004,"kevAdded":null},{"id":"CVE-2026-86104","published":"2026-09-29T23:05:48.197Z","updated":"2026-09-30T15:28:12.318Z","title":"Fireware OS Resource Exhaustion in Login Process Allows Denial of Service","severity":"HIGH","score":8.7,"vendor":"WatchGuard","product":"Fireware OS","kev":false,"epss":0.00369,"kevAdded":null},{"id":"CVE-2026-18145","published":"2026-09-29T23:05:47.947Z","updated":"2026-10-01T03:55:40.898Z","title":"Fireware OS Stack-based Buffer Overflow in spamd Allows Remote Code Execution","severity":"HIGH","score":8.6,"vendor":"WatchGuard","product":"Fireware OS","kev":false,"epss":0.00389,"kevAdded":null},{"id":"CVE-2026-86101","published":"2026-09-29T23:05:47.900Z","updated":"2026-09-30T15:28:12.596Z","title":"Fireware OS Authorization Bypass in SAML Login Allows Unauthorized SSLVPN Access","severity":"HIGH","score":7.2,"vendor":"WatchGuard","product":"Fireware OS","kev":false,"epss":0.00234,"kevAdded":null},{"id":"CVE-2026-13046","published":"2026-09-29T23:05:47.739Z","updated":"2026-10-01T03:55:38.693Z","title":"Fireware OS Deserialization of Untrusted Data in samld Allows Remote Code Execution","severity":"HIGH","score":7.5,"vendor":"WatchGuard","product":"Fireware OS","kev":false,"epss":0.00369,"kevAdded":null},{"id":"CVE-2026-86131","published":"2026-09-29T23:05:47.700Z","updated":"2026-10-01T17:08:46.734Z","title":"Fireware OS Code Injection in BOVPN Over TLS Client Allows Remote Code Execution","severity":"CRITICAL","score":9.2,"vendor":"WatchGuard","product":"Fireware OS","kev":false,"epss":0.00469,"kevAdded":null},{"id":"CVE-2026-13224","published":"2026-09-29T23:05:47.654Z","updated":"2026-09-30T15:28:13.015Z","title":"Fireware OS Path Traversal in WebUI Management Agent Allows Arbitrary Local File Read","severity":"HIGH","score":8.2,"vendor":"WatchGuard","product":"Fireware OS","kev":false,"epss":0.00361,"kevAdded":null},{"id":"CVE-2026-86133","published":"2026-09-29T23:05:47.652Z","updated":"2026-09-30T15:28:13.147Z","title":"Fireware OS Pre-Authentication Integer Underflow in iked Allows Remote Denial of Service","severity":"HIGH","score":8.2,"vendor":"WatchGuard","product":"Fireware OS","kev":false,"epss":0.00346,"kevAdded":null},{"id":"CVE-2026-90441","published":"2026-09-29T23:05:47.593Z","updated":"2026-09-30T15:28:13.288Z","title":"Fireware OS Missing Authorization in wgagent Management API Allows Denial of Service - Variant B","severity":"HIGH","score":7.1,"vendor":"WatchGuard","product":"Fireware OS","kev":false,"epss":0.00232,"kevAdded":null},{"id":"CVE-2026-18105","published":"2026-09-29T23:05:47.591Z","updated":"2026-09-30T15:28:13.437Z","title":"Fireware OS Uncontrolled Resource Consumption in Diagnostic Tasks Allows Denial of Service","severity":"HIGH","score":7.1,"vendor":"WatchGuard","product":"Fireware OS","kev":false,"epss":0.0024,"kevAdded":null},{"id":"CVE-2026-86105","published":"2026-09-29T23:05:47.554Z","updated":"2026-09-30T15:28:13.566Z","title":"Fireware OS Improper Authorization in Access Portal Reverse Proxy","severity":"MEDIUM","score":5.3,"vendor":"WatchGuard","product":"Fireware OS","kev":false,"epss":0.00308,"kevAdded":null},{"id":"CVE-2026-86136","published":"2026-09-29T23:05:47.485Z","updated":"2026-09-30T15:28:13.707Z","title":"Fireware OS Missing Authorization in wgagent Management API Allows Denial of Service - Variant A","severity":"HIGH","score":7.1,"vendor":"WatchGuard","product":"Fireware OS","kev":false,"epss":0.00297,"kevAdded":null},{"id":"CVE-2026-86132","published":"2026-09-29T23:05:47.422Z","updated":"2026-09-30T15:28:13.842Z","title":"Fireware OS Pre-Authentication Integer Underflow in iked Allows Denial of Service","severity":"HIGH","score":8.2,"vendor":"WatchGuard","product":"Fireware OS","kev":false,"epss":0.00362,"kevAdded":null},{"id":"CVE-2026-86128","published":"2026-09-29T23:05:47.408Z","updated":"2026-09-30T15:28:13.992Z","title":"Fireware OS NULL Pointer Dereference in NetFlow IPv6 Traffic Processing Allows Remote Denial of Service","severity":"HIGH","score":8.2,"vendor":"WatchGuard","product":"Fireware OS","kev":false,"epss":0.00362,"kevAdded":null},{"id":"CVE-2026-81433","published":"2026-09-29T23:05:47.399Z","updated":"2026-10-01T03:55:40.175Z","title":"Fireware OS Pre-Authentication Stack Buffer Overflow in fingerd Allows Remote Code Execution","severity":"HIGH","score":8.7,"vendor":"WatchGuard","product":"Fireware OS","kev":false,"epss":0.00204,"kevAdded":null},{"id":"CVE-2026-86102","published":"2026-09-28T16:51:22.163Z","updated":"2026-09-28T18:02:56.489Z","title":"WatchGuard AP Command Injection in Internal Management API Allows Command Execution","severity":"CRITICAL","score":9.3,"vendor":"WatchGuard","product":"WatchGuard AP","kev":false,"epss":0.02262,"kevAdded":null},{"id":"CVE-2026-87969","published":"2026-09-28T16:51:22.069Z","updated":"2026-09-28T18:02:56.619Z","title":"WatchGuard AP Authenticated Command Injection in Diagnostic CLI","severity":"HIGH","score":8.6,"vendor":"WatchGuard","product":"WatchGuard AP","kev":false,"epss":0.01371,"kevAdded":null},{"id":"CVE-2026-101891","published":"2026-09-28T16:51:22.067Z","updated":"2026-09-28T18:02:56.755Z","title":"WatchGuard AP Improper Access Control in API Service Allows Unauthenticated Access","severity":"CRITICAL","score":9.3,"vendor":"WatchGuard","product":"WatchGuard AP","kev":false,"epss":0.00312,"kevAdded":null},{"id":"CVE-2026-95676","published":"2026-09-23T12:52:04.902Z","updated":"2026-09-23T15:24:54.616Z","title":"AuthPoint Gateway Improper Authentication in LDAP Sync Allows First-Factor Authentication Bypass","severity":"HIGH","score":7.4,"vendor":"WatchGuard","product":"AuthPoint Authentication Gateway","kev":false,"epss":0.00375,"kevAdded":null},{"id":"CVE-2026-86135","published":"2026-09-08T14:00:47.181Z","updated":"2026-09-08T14:37:57.032Z","title":"Dimension CSRF Vulnerability in Database Snapshot Creation Allows Denial of Service","severity":"HIGH","score":7,"vendor":"WatchGuard","product":"Dimension","kev":false,"epss":0.00249,"kevAdded":null},{"id":"CVE-2026-78616","published":"2026-08-27T23:26:31.756Z","updated":"2026-08-28T16:22:37.752Z","title":"Dimension Stored XSS via Trusted CA Certificate Configuration","severity":"MEDIUM","score":4.8,"vendor":"WatchGuard","product":"Dimension","kev":false,"epss":0.00303,"kevAdded":null},{"id":"CVE-2026-78498","published":"2026-08-27T23:26:31.719Z","updated":"2026-08-28T16:24:22.933Z","title":"Dimension Server-Side Request Forgery via Email Server Test Settings","severity":"MEDIUM","score":5.1,"vendor":"WatchGuard","product":"Dimension","kev":false,"epss":0.00441,"kevAdded":null},{"id":"CVE-2026-78612","published":"2026-08-27T23:26:31.557Z","updated":"2026-08-28T16:26:55.125Z","title":"Dimension SQL Injection in Scheduled Report","severity":"HIGH","score":8.6,"vendor":"WatchGuard","product":"Dimension","kev":false,"epss":0.00708,"kevAdded":null},{"id":"CVE-2026-78103","published":"2026-08-27T23:26:31.432Z","updated":"2026-08-28T16:28:30.798Z","title":"Dimension Log Server Configuration Lock Bypass Vulnerability","severity":"MEDIUM","score":5.1,"vendor":"WatchGuard","product":"Dimension","kev":false,"epss":0.00493,"kevAdded":null},{"id":"CVE-2026-78615","published":"2026-08-27T23:26:31.430Z","updated":"2026-08-28T16:30:36.607Z","title":"WatchGuard Dimension Reflected DOM-Based XSS in Report Detail Page","severity":"MEDIUM","score":4.6,"vendor":"WatchGuard","product":"Dimension","kev":false,"epss":0.00474,"kevAdded":null},{"id":"CVE-2026-78613","published":"2026-08-27T23:26:31.266Z","updated":"2026-08-28T17:13:26.282Z","title":"Dimension SQL Injection in Log Viewer","severity":"HIGH","score":8.6,"vendor":"WatchGuard","product":"Dimension","kev":false,"epss":0.00617,"kevAdded":null},{"id":"CVE-2026-78495","published":"2026-08-27T23:26:31.170Z","updated":"2026-08-28T16:32:33.663Z","title":"Dimension Server-Side Request Forgery via Remote Backup Connection Test","severity":"MEDIUM","score":5.3,"vendor":"WatchGuard","product":"Dimension","kev":false,"epss":0.00393,"kevAdded":null},{"id":"CVE-2026-78617","published":"2026-08-27T23:26:31.148Z","updated":"2026-08-28T15:56:20.069Z","title":"WatchGuard Dimension Web UI Authentication Brute-Force Due to Missing Rate Limiting","severity":"MEDIUM","score":6.3,"vendor":"WatchGuard","product":"Dimension","kev":false,"epss":0.00415,"kevAdded":null},{"id":"CVE-2026-78047","published":"2026-08-27T23:26:31.142Z","updated":"2026-08-28T15:56:28.158Z","title":"Dimension Stored XSS in Scheduled Report Task","severity":"MEDIUM","score":5.1,"vendor":"WatchGuard","product":"Dimension","kev":false,"epss":0.00437,"kevAdded":null},{"id":"CVE-2026-78610","published":"2026-08-27T23:26:31.006Z","updated":"2026-08-28T15:56:36.349Z","title":"Dimension CSRF Vulnerability in Administrator Passphrase Change Endpoint","severity":"HIGH","score":8.4,"vendor":"WatchGuard","product":"Dimension","kev":false,"epss":0.00231,"kevAdded":null},{"id":"CVE-2026-78499","published":"2026-08-27T23:26:30.962Z","updated":"2026-08-28T15:56:45.148Z","title":"Dimension SSRF via FTP Server Test Connection","severity":"MEDIUM","score":5.1,"vendor":"WatchGuard","product":"Dimension","kev":false,"epss":0.00441,"kevAdded":null},{"id":"CVE-2026-78174","published":"2026-08-27T23:26:30.875Z","updated":"2026-08-28T15:56:52.024Z","title":"WatchGuard Dimension Session Hijack via Exposed Session Tokens in Diagnostic Logs","severity":"CRITICAL","score":9.3,"vendor":"WatchGuard","product":"Dimension","kev":false,"epss":0.00428,"kevAdded":null},{"id":"CVE-2026-78618","published":"2026-08-27T23:26:30.669Z","updated":"2026-08-28T16:36:04.822Z","title":"Dimension Business Logic Flaw Allows Chained Backend Object Operations","severity":"MEDIUM","score":6.9,"vendor":"WatchGuard","product":"Dimension","kev":false,"epss":0.00431,"kevAdded":null},{"id":"CVE-2026-78500","published":"2026-08-27T23:26:30.655Z","updated":"2026-08-28T16:37:30.969Z","title":"Dimension Blind SSRF via Database Test Connection Feature","severity":"MEDIUM","score":5.1,"vendor":"WatchGuard","product":"Dimension","kev":false,"epss":0.00441,"kevAdded":null},{"id":"CVE-2026-13108","published":"2026-08-27T23:26:30.552Z","updated":"2026-08-28T16:39:19.734Z","title":"Dimension Denial-of-Service","severity":"HIGH","score":8.7,"vendor":"WatchGuard","product":"Dimension","kev":false,"epss":0.00428,"kevAdded":null},{"id":"CVE-2026-78614","published":"2026-08-27T23:26:30.524Z","updated":"2026-08-28T16:40:22.817Z","title":"Dimension SQL Injection in Audit Report","severity":"HIGH","score":8.6,"vendor":"WatchGuard","product":"Dimension","kev":false,"epss":0.00708,"kevAdded":null},{"id":"CVE-2026-19315","published":"2026-08-27T23:24:33.721Z","updated":"2026-09-03T20:49:55.609Z","title":"Fireware OS Pre-Authentication Type Confusion in iked Allows Remote Code Execution","severity":"CRITICAL","score":9.3,"vendor":"WatchGuard","product":"Fireware OS","kev":false,"epss":0.00701,"kevAdded":null},{"id":"CVE-2026-19314","published":"2026-08-27T23:24:33.254Z","updated":"2026-09-03T20:49:55.620Z","title":"Fireware OS Integer Underflow in iked Allows Unauthenticated Denial of Service (DoS)","severity":"HIGH","score":8.7,"vendor":"WatchGuard","product":"Fireware OS","kev":false,"epss":0.00544,"kevAdded":null},{"id":"CVE-2026-19317","published":"2026-08-27T23:24:33.131Z","updated":"2026-09-03T20:49:56.089Z","title":"Fireware OS Pre-Authentication Out-of-Bounds Read in iked Allows Denial of Service (DoS)","severity":"HIGH","score":8.7,"vendor":"WatchGuard","product":"Fireware OS","kev":false,"epss":0.00544,"kevAdded":null},{"id":"CVE-2026-78011","published":"2026-08-27T23:24:33.126Z","updated":"2026-09-03T20:49:55.699Z","title":"Fireware OS Integer Underflow in Iked Allows Unauthenticated Denial of Service (DoS)","severity":"HIGH","score":8.7,"vendor":"WatchGuard","product":"Fireware OS","kev":false,"epss":0.00544,"kevAdded":null},{"id":"CVE-2026-78010","published":"2026-08-27T23:24:32.821Z","updated":"2026-09-03T20:49:55.485Z","title":"Fireware OS Stack-Based Buffer Overflow in iked Allows Unauthenticated Denial of Service","severity":"HIGH","score":8.7,"vendor":"WatchGuard","product":"Fireware OS","kev":false,"epss":0.00542,"kevAdded":null},{"id":"CVE-2026-13086","published":"2026-08-27T23:24:32.779Z","updated":"2026-09-03T20:49:56.053Z","title":"Fireware OS Stack-Based Buffer Overflow in Mobile Security epm Endpoint","severity":"CRITICAL","score":9.3,"vendor":"WatchGuard","product":"Fireware OS","kev":false,"epss":0.00662,"kevAdded":null},{"id":"CVE-2026-19313","published":"2026-08-27T23:24:32.699Z","updated":"2026-09-11T21:34:11.490Z","title":"Fireware OS Pre-Authentication Heap Buffer Overflow in iked Allows Remote Code Execution","severity":"CRITICAL","score":9.3,"vendor":"WatchGuard","product":"Fireware OS","kev":false,"epss":0.00707,"kevAdded":null},{"id":"CVE-2026-19316","published":"2026-08-27T23:24:32.683Z","updated":"2026-09-03T20:49:55.779Z","title":"Fireware OS Pre-Authentication Double Free in iked Allows Denial of Service (DoS)","severity":"HIGH","score":8.7,"vendor":"WatchGuard","product":"Fireware OS","kev":false,"epss":0.00544,"kevAdded":null},{"id":"CVE-2026-78009","published":"2026-08-27T23:24:32.671Z","updated":"2026-09-03T20:49:55.437Z","title":"Fireware OS Out-of-Bounds Read in iked Allows Unauthenticated Denial of Service (DoS)","severity":"HIGH","score":8.7,"vendor":"WatchGuard","product":"Fireware OS","kev":false,"epss":0.00544,"kevAdded":null},{"id":"CVE-2026-19318","published":"2026-08-27T23:24:32.589Z","updated":"2026-09-03T20:49:55.462Z","title":"Fireware OS Pre-Authentication Stack Buffer Overflow in iked Allows Remote Code Execution","severity":"CRITICAL","score":9.3,"vendor":"WatchGuard","product":"Fireware OS","kev":false,"epss":0.00707,"kevAdded":null},{"id":"CVE-2026-78008","published":"2026-08-27T23:24:32.515Z","updated":"2026-09-03T20:49:55.551Z","title":"Fireware OS Authenticated Buffer Overflow in wgagent","severity":"HIGH","score":8.6,"vendor":"WatchGuard","product":"Fireware OS","kev":false,"epss":0.00606,"kevAdded":null},{"id":"CVE-2026-81851","published":"2026-08-27T22:58:26.855Z","updated":"2026-08-28T15:57:26.539Z","title":"Fireware OS Heap-Based Buffer Overflow in iked Allows Denial of Service","severity":"MEDIUM","score":6.9,"vendor":"WatchGuard","product":"Fireware OS","kev":false,"epss":0.00407,"kevAdded":null},{"id":"CVE-2026-57910","published":"2026-08-25T11:47:49.189Z","updated":"2026-09-09T14:57:50.115Z","title":"WatchGuard Agent improper authentication allows unauthenticated remote code execution","severity":"CRITICAL","score":9.3,"vendor":"WatchGuard","product":"WatchGuard Agent","kev":false,"epss":0.00245,"kevAdded":null},{"id":"CVE-2026-57909","published":"2026-08-25T11:47:03.000Z","updated":"2026-08-26T13:16:42.462Z","title":"WatchGuard Agent path traversal allows unauthenticated remote code execution","severity":"CRITICAL","score":9.4,"vendor":"WatchGuard","product":"WatchGuard Agent","kev":false,"epss":0.00407,"kevAdded":null},{"id":"CVE-2026-13053","published":"2026-07-02T23:08:27.642Z","updated":"2026-08-27T22:58:26.527Z","title":"WatchGuard Firebox Authenticated Out of Bounds Write in Management CLI Command Handler","severity":"HIGH","score":8.6,"vendor":"WatchGuard","product":"Fireware OS","kev":false,"epss":0.00642,"kevAdded":null},{"id":"CVE-2026-13050","published":"2026-07-02T23:08:12.667Z","updated":"2026-08-27T22:58:26.375Z","title":"WatchGuard Firebox networkd Out of Bounds Write Vulnerability","severity":"HIGH","score":8.6,"vendor":"WatchGuard","product":"Fireware OS","kev":false,"epss":0.00642,"kevAdded":null},{"id":"CVE-2026-13054","published":"2026-07-02T23:07:57.548Z","updated":"2026-08-27T22:58:26.842Z","title":"WatchGuard Firebox Arbitrary File Write via Path Traversal in Management Web UI","severity":"HIGH","score":8.6,"vendor":"WatchGuard","product":"Fireware OS","kev":false,"epss":0.00605,"kevAdded":null},{"id":"CVE-2026-13079","published":"2026-07-02T23:07:30.489Z","updated":"2026-08-27T20:21:14.621Z","title":"WatchGuard Mobile VPN with SSL Windows Client Local Privilege Escalation","severity":"HIGH","score":7.3,"vendor":"WatchGuard","product":"Mobile VPN with SSL Client","kev":false,"epss":0.0014,"kevAdded":null},{"id":"CVE-2026-8247","published":"2026-07-02T23:07:16.148Z","updated":"2026-08-27T22:58:26.584Z","title":"WatchGuard Firebox admd Out of Bounds Write Vulnerability","severity":"HIGH","score":7.7,"vendor":"WatchGuard","product":"Fireware OS","kev":false,"epss":0.00383,"kevAdded":null},{"id":"CVE-2026-13728","published":"2026-07-02T23:07:01.203Z","updated":"2026-08-27T22:58:26.718Z","title":"WatchGuard Firebox Hardcoded Fallback Encryption Key in Access Portal Resource Credential Database","severity":"MEDIUM","score":5.9,"vendor":"WatchGuard","product":"Fireware OS","kev":false,"epss":0.0023,"kevAdded":null},{"id":"CVE-2026-13084","published":"2026-07-02T23:06:48.043Z","updated":"2026-08-27T22:58:26.824Z","title":"Null Pointer Dereference in WatchGuard Fireware OS iked Process","severity":"HIGH","score":8.7,"vendor":"WatchGuard","product":"Fireware OS","kev":false,"epss":0.00608,"kevAdded":null},{"id":"CVE-2026-13368","published":"2026-07-02T23:06:32.928Z","updated":"2026-08-27T22:58:26.790Z","title":"WatchGuard Firebox Race Condition and Use-After-Free in Mobile VPN with IKEv2 LDAP Authentication","severity":"CRITICAL","score":9.2,"vendor":"WatchGuard","product":"Fireware OS","kev":false,"epss":0.00936,"kevAdded":null},{"id":"CVE-2026-13722","published":"2026-07-02T23:06:12.339Z","updated":"2026-08-27T22:58:26.489Z","title":"WatchGuard Firebox Firmware Image Validation Bypass in WatchGuard Fireware OS","severity":"HIGH","score":8.6,"vendor":"WatchGuard","product":"Fireware OS","kev":false,"epss":0.00332,"kevAdded":null},{"id":"CVE-2026-13384","published":"2026-07-02T23:05:59.971Z","updated":"2026-08-27T22:58:27.286Z","title":"WatchGuard Firebox wgagent Out of Bounds Write Vulnerability","severity":"HIGH","score":8.6,"vendor":"WatchGuard","product":"Fireware OS","kev":false,"epss":0.00724,"kevAdded":null},{"id":"CVE-2026-13383","published":"2026-07-02T23:05:53.872Z","updated":"2026-08-27T22:58:27.200Z","title":"WatchGuard Firebox ikestubd Out of Bounds Write Vulnerability","severity":"HIGH","score":8.6,"vendor":"WatchGuard","product":"Fireware OS","kev":false,"epss":0.00724,"kevAdded":null},{"id":"CVE-2026-13377","published":"2026-07-02T23:05:32.445Z","updated":"2026-08-27T22:58:27.232Z","title":"WatchGuard Firebox Stored Cross-Site-Scripting (XSS) Vulnerability in SIP Proxy Configuration","severity":"MEDIUM","score":4.8,"vendor":"WatchGuard","product":"Fireware OS","kev":false,"epss":0.00271,"kevAdded":null},{"id":"CVE-2026-13376","published":"2026-07-02T23:05:26.669Z","updated":"2026-08-27T22:58:26.338Z","title":"WatchGuard Firebox Stored Cross-Site-Scripting (XSS) Vulnerability in spamBlocker Module","severity":"MEDIUM","score":4.8,"vendor":"WatchGuard","product":"Fireware OS","kev":false,"epss":0.00271,"kevAdded":null},{"id":"CVE-2026-13375","published":"2026-07-02T23:05:20.273Z","updated":"2026-08-27T22:58:27.025Z","title":"WatchGuard Firebox Stored Cross-Site-Scripting (XSS) Vulnerability in Autotask Technology Integration Configuration","severity":"MEDIUM","score":4.8,"vendor":"WatchGuard","product":"Fireware OS","kev":false,"epss":0.00271,"kevAdded":null},{"id":"CVE-2026-13374","published":"2026-07-02T23:05:13.056Z","updated":"2026-08-27T22:58:26.485Z","title":"WatchGuard Firebox Stored Cross-Site-Scripting (XSS) Vulnerability in ConnectWise Technology Integration Configuration","severity":"MEDIUM","score":4.8,"vendor":"WatchGuard","product":"Fireware OS","kev":false,"epss":0.00271,"kevAdded":null},{"id":"CVE-2026-13373","published":"2026-07-02T23:05:00.814Z","updated":"2026-08-27T22:58:26.547Z","title":"WatchGuard Firebox Stored Cross-Site-Scripting (XSS) Vulnerability in Tigerpaw Technology Integration Configuration","severity":"MEDIUM","score":4.8,"vendor":"WatchGuard","product":"Fireware OS","kev":false,"epss":0.00271,"kevAdded":null},{"id":"CVE-2026-13371","published":"2026-07-02T23:04:42.674Z","updated":"2026-08-27T22:58:26.802Z","title":"WatchGuard Firebox Management Web UI Denial of Service via Unsafe Deserialization","severity":"MEDIUM","score":6.9,"vendor":"WatchGuard","product":"Fireware OS","kev":false,"epss":0.00588,"kevAdded":null},{"id":"CVE-2026-6788","published":"2026-05-06T15:46:48.269Z","updated":"2026-08-10T17:00:48.495Z","title":"Uncontrolled search path in PluginLauncher allows SYSTEM code execution in WatchGuard Agent","severity":"HIGH","score":8.5,"vendor":"WatchGuard","product":"WatchGuard Agent","kev":false,"epss":0.00126,"kevAdded":null},{"id":"CVE-2026-6787","published":"2026-05-06T15:46:26.104Z","updated":"2026-08-10T16:59:50.513Z","title":"Usage of a hard-coded cryptographic key in WatchGuard Agent allows inclusion of code into existing process","severity":"HIGH","score":8.5,"vendor":"WatchGuard","product":"WatchGuard Agent","kev":false,"epss":0.00113,"kevAdded":null},{"id":"CVE-2026-41286","published":"2026-05-06T15:46:01.957Z","updated":"2026-08-10T16:52:32.043Z","title":"Stack-based Buffer Overflow in WatchGuard Agent Discovery Service on Windows Causes Denial of Service - Variant B","severity":"HIGH","score":7.1,"vendor":"WatchGuard","product":"WatchGuard Agent","kev":false,"epss":0.00252,"kevAdded":null},{"id":"CVE-2026-41288","published":"2026-05-06T15:45:43.371Z","updated":"2026-08-10T16:54:18.439Z","title":"WatchGuard Agent on Windows Privilege Escalation Vulnerability","severity":"HIGH","score":7.3,"vendor":"WatchGuard","product":"WatchGuard Agent","kev":false,"epss":0.00107,"kevAdded":null},{"id":"CVE-2026-41287","published":"2026-05-06T13:40:29.044Z","updated":"2026-08-10T16:50:15.299Z","title":"Stack-based Buffer Overflow in WatchGuard Agent Discovery Service on Windows Causes Denial of Service  - Variant A","severity":"HIGH","score":7.1,"vendor":"WatchGuard","product":"WatchGuard Agent","kev":false,"epss":0.00252,"kevAdded":null},{"id":"CVE-2026-3987","published":"2026-04-01T21:32:30.426Z","updated":"2026-08-10T16:46:12.527Z","title":"WatchGuard Firebox Arbitrary File Write vis Path Traversal in Fireware Web UI","severity":"HIGH","score":8.6,"vendor":"WatchGuard","product":"Fireware OS","kev":false,"epss":0.00691,"kevAdded":null},{"id":"CVE-2026-4315","published":"2026-03-30T12:38:15.842Z","updated":"2026-08-27T22:58:26.442Z","title":"WatchGuard Firebox Cross-Site Request Forgery (CSRF) in Fireware Web UI","severity":"HIGH","score":7.1,"vendor":"WatchGuard","product":"Fireware OS","kev":false,"epss":0.00168,"kevAdded":null},{"id":"CVE-2026-4266","published":"2026-03-30T12:38:01.593Z","updated":"2026-08-27T22:58:27.131Z","title":"WatchGuard Firebox Insecure Deserialization in Fireware Access Portal","severity":"HIGH","score":8.4,"vendor":"WatchGuard","product":"Fireware OS","kev":false,"epss":0.00275,"kevAdded":null},{"id":"CVE-2026-3344","published":"2026-03-03T13:17:56.622Z","updated":"2026-08-10T16:32:26.799Z","title":"WatchGuard Firebox System Integrity Check Bypass","severity":"MEDIUM","score":6.9,"vendor":"WatchGuard","product":"Fireware OS","kev":false,"epss":0.00316,"kevAdded":null},{"id":"CVE-2026-3343","published":"2026-03-03T13:17:48.810Z","updated":"2026-08-10T16:27:58.515Z","title":"WatchGuard Firebox Reflected Cross-Site-Scripting (XSS) Vulnerability in Fireware Web UI","severity":"MEDIUM","score":5.1,"vendor":"WatchGuard","product":"Fireware OS","kev":false,"epss":0.00242,"kevAdded":null},{"id":"CVE-2026-3342","published":"2026-03-03T13:17:39.376Z","updated":"2026-03-04T15:22:14.651Z","title":"WatchGuard Firebox Out of Bounds Write Vulnerability","severity":"HIGH","score":8.6,"vendor":"WatchGuard","product":"Fireware OS","kev":false,"epss":0.06431,"kevAdded":null},{"id":"CVE-2026-1498","published":"2026-01-30T13:02:59.561Z","updated":"2026-08-24T13:54:31.883Z","title":"WatchGuard Firebox LDAP Injection","severity":"HIGH","score":7,"vendor":"WatchGuard","product":"Fireware OS","kev":false,"epss":0.00919,"kevAdded":null},{"id":"CVE-2025-14733","published":"2025-12-19T00:01:55.722Z","updated":"2026-09-09T04:18:10.655Z","title":"WatchGuard Firebox iked Out of Bounds Write Vulnerability","severity":"CRITICAL","score":9.3,"vendor":"WatchGuard","product":"Fireware OS","kev":true,"epss":0.29423,"kevAdded":"2025-12-19"},{"id":"CVE-2025-1547","published":"2025-12-04T22:11:09.164Z","updated":"2026-08-10T15:24:11.719Z","title":"WatchGuard Firebox Authenticated Stack Overflow in Certificate Request Command","severity":"HIGH","score":7.5,"vendor":"WatchGuard","product":"Fireware OS","kev":false,"epss":0.00378,"kevAdded":null},{"id":"CVE-2025-1910","published":"2025-12-04T21:56:51.105Z","updated":"2026-08-08T02:28:30.254Z","title":"WatchGuard Mobile VPN with SSL Local Privilege Escalation via Update Package","severity":"MEDIUM","score":6.3,"vendor":"WatchGuard","product":"Mobile VPN with SSL Client","kev":false,"epss":0.00284,"kevAdded":null},{"id":"CVE-2025-6946","published":"2025-12-04T21:48:50.477Z","updated":"2026-08-08T03:25:30.938Z","title":"WatchGuard Firebox Stored Cross-Site-Scripting (XSS) Vulnerability in IPS Configuration","severity":"MEDIUM","score":4.8,"vendor":"WatchGuard","product":"Fireware OS","kev":false,"epss":0.00254,"kevAdded":null},{"id":"CVE-2025-1545","published":"2025-12-04T21:48:27.311Z","updated":"2026-08-10T16:03:01.062Z","title":"WatchGuard Firebox XPath Injection Vulnerability in Web CGI","severity":"HIGH","score":8.2,"vendor":"WatchGuard","product":"Fireware OS","kev":false,"epss":0.00513,"kevAdded":null},{"id":"CVE-2025-11838","published":"2025-12-04T21:48:10.961Z","updated":"2026-08-10T15:40:56.274Z","title":"WatchGuard Firebox iked Memory Corruption Vulnerability","severity":"HIGH","score":8.7,"vendor":"WatchGuard","product":"Fireware OS","kev":false,"epss":0.00518,"kevAdded":null},{"id":"CVE-2025-13940","published":"2025-12-04T21:47:44.483Z","updated":"2026-08-10T16:04:35.648Z","title":"WatchGuard Firebox Boot Time System Integrity Check Bypass","severity":"MEDIUM","score":6.7,"vendor":"WatchGuard","product":"Fireware OS","kev":false,"epss":0.00135,"kevAdded":null},{"id":"CVE-2025-13939","published":"2025-12-04T21:47:37.793Z","updated":"2026-08-10T15:59:42.924Z","title":"WatchGuard Firebox Stored Cross-Site-Scripting (XSS) Vulnerability in Gateway Wireless Controller","severity":"MEDIUM","score":4.8,"vendor":"WatchGuard","product":"Fireware OS","kev":false,"epss":0.00212,"kevAdded":null},{"id":"CVE-2025-13938","published":"2025-12-04T21:47:29.650Z","updated":"2026-08-10T15:57:30.755Z","title":"WatchGuard Firebox Stored Cross-Site-Scripting (XSS) Vulnerability in Autotask Technology Integration Configuration","severity":"MEDIUM","score":4.8,"vendor":"WatchGuard","product":"Fireware OS","kev":false,"epss":0.00212,"kevAdded":null},{"id":"CVE-2025-13937","published":"2025-12-04T21:47:19.995Z","updated":"2026-08-10T15:53:23.819Z","title":"WatchGuard Firebox Stored Cross-Site-Scripting (XSS) Vulnerability in ConnectWise Technology Integration Configuration","severity":"MEDIUM","score":4.8,"vendor":"WatchGuard","product":"Fireware OS","kev":false,"epss":0.00212,"kevAdded":null},{"id":"CVE-2025-13936","published":"2025-12-04T21:45:51.774Z","updated":"2026-08-10T15:51:04.189Z","title":"WatchGuard Firebox Stored Cross-Site-Scripting (XSS) Vulnerability in Tigerpaw Technology Integration Configuration","severity":"MEDIUM","score":4.8,"vendor":"WatchGuard","product":"Fireware OS","kev":false,"epss":0.00212,"kevAdded":null},{"id":"CVE-2025-12196","published":"2025-12-04T21:45:29.261Z","updated":"2026-08-10T15:46:01.569Z","title":"WatchGuard Firebox Authenticated Out of Bounds Write in Management CLI Ping Command","severity":"HIGH","score":8.6,"vendor":"WatchGuard","product":"Fireware OS","kev":false,"epss":0.00645,"kevAdded":null},{"id":"CVE-2025-12195","published":"2025-12-04T21:43:57.162Z","updated":"2026-08-10T15:43:40.672Z","title":"WatchGuard Firebox Authenticated Out of Bounds Write in Management CLI IPSec Configuration","severity":"HIGH","score":8.6,"vendor":"WatchGuard","product":"Fireware OS","kev":false,"epss":0.00716,"kevAdded":null},{"id":"CVE-2025-12026","published":"2025-12-04T21:43:46.266Z","updated":"2026-08-10T15:38:46.244Z","title":"WatchGuard Firebox Authenticated Out of Bounds Write in certd","severity":"HIGH","score":8.6,"vendor":"WatchGuard","product":"Fireware OS","kev":false,"epss":0.00458,"kevAdded":null},{"id":"CVE-2025-1549","published":"2025-10-29T16:50:39.263Z","updated":"2026-08-10T15:35:21.695Z","title":"WatchGuard Mobile VPN with SSL Local Privilege Escallation","severity":"MEDIUM","score":6.3,"vendor":"WatchGuard","product":"Mobile VPN with SSL Client","kev":false,"epss":0.00154,"kevAdded":null},{"id":"CVE-2025-4106","published":"2025-10-24T21:32:30.165Z","updated":"2026-08-08T02:31:02.233Z","title":"WatchGuard Firebox leftover debug code vulnerability","severity":"HIGH","score":8.9,"vendor":"WatchGuard","product":"Fireware OS","kev":false,"epss":0.00323,"kevAdded":null},{"id":"CVE-2025-9242","published":"2025-09-17T07:29:23.738Z","updated":"2026-08-10T15:28:40.461Z","title":"WatchGuard Firebox iked Out of Bounds Write Vulnerability","severity":"CRITICAL","score":9.3,"vendor":"WatchGuard","product":"Fireware OS","kev":true,"epss":0.92219,"kevAdded":"2025-11-12"},{"id":"CVE-2025-6947","published":"2025-09-15T21:18:36.390Z","updated":"2026-08-07T23:36:08.275Z","title":"WatchGuard Firebox Stored Cross-Site-Scripting (XSS) Vulnerability in SIP Proxy Configuration","severity":"MEDIUM","score":4.8,"vendor":"WatchGuard","product":"Fireware OS","kev":false,"epss":0.00476,"kevAdded":null},{"id":"CVE-2025-6999","published":"2025-09-15T21:17:51.424Z","updated":"2026-08-10T15:26:28.073Z","title":"WatchGuard Firebox Authentication Portal Request Smuggling Vulnerability","severity":"MEDIUM","score":6.9,"vendor":"WatchGuard","product":"Fireware OS","kev":false,"epss":0.00449,"kevAdded":null},{"id":"CVE-2025-4805","published":"2025-05-16T20:13:47.615Z","updated":"2026-08-08T02:27:29.992Z","title":"WatchGuard Firebox Stored Cross-Site-Scripting (XSS) Vulnerability in Acces Portal Configuration","severity":"MEDIUM","score":4.8,"vendor":"WatchGuard","product":"Fireware OS","kev":false,"epss":0.00566,"kevAdded":null},{"id":"CVE-2025-4804","published":"2025-05-16T20:12:44.848Z","updated":"2026-08-08T02:25:24.503Z","title":"WatchGuard Firebox Stored Cross-Site-Scripting (XSS) Vulnerability in Hotpot Configuration","severity":"MEDIUM","score":4.8,"vendor":"WatchGuard","product":"Fireware OS","kev":false,"epss":0.00465,"kevAdded":null},{"id":"CVE-2025-2782","published":"2025-03-28T22:24:47.152Z","updated":"2026-08-08T02:23:33.234Z","title":"WatchGuard Terminal Services Agent Local Privilege Escalation via Non-Standard Installation Directory","severity":"MEDIUM","score":6.3,"vendor":"WatchGuard","product":"SSO Terminal Services Agent","kev":false,"epss":0.00151,"kevAdded":null},{"id":"CVE-2025-2781","published":"2025-03-28T22:23:50.752Z","updated":"2026-08-08T02:18:33.812Z","title":"WatchGuard Mobile VPN with SSL Local Privilege Escalation via Non-Standard Installation Directory","severity":"MEDIUM","score":6.3,"vendor":"WatchGuard","product":"Mobile VPN with SSL Client","kev":false,"epss":0.00139,"kevAdded":null},{"id":"CVE-2025-0178","published":"2025-02-14T13:22:22.237Z","updated":"2026-08-08T02:17:05.783Z","title":"WatchGaurd Firebox Host Header Injection Vulnerability","severity":"MEDIUM","score":5.1,"vendor":"WatchGuard","product":"Fireware OS","kev":false,"epss":0.00237,"kevAdded":null},{"id":"CVE-2025-1239","published":"2025-02-14T13:21:09.213Z","updated":"2026-08-08T02:16:05.878Z","title":"WatchGuard Firebox Stored Cross-Site-Scripting (XSS) Vulnerability in Blocked Sites List","severity":"MEDIUM","score":4.8,"vendor":"WatchGuard","product":"Fireware OS","kev":false,"epss":0.00554,"kevAdded":null},{"id":"CVE-2025-1071","published":"2025-02-14T13:20:48.780Z","updated":"2026-08-07T23:44:33.928Z","title":"WatchGuard Firebox Stored Cross-Site-Scripting (XSS) Vulnerability in spamBlocker Module","severity":"MEDIUM","score":4.8,"vendor":"WatchGuard","product":"Fireware OS","kev":false,"epss":0.00301,"kevAdded":null},{"id":"CVE-2024-8424","published":"2024-11-07T23:27:50.279Z","updated":"2026-08-07T23:43:42.128Z","title":"WatchGuard Endpoint Protection Privilege Escalation in PSANHost Enables Arbitrary File Delete as SYSTEM","severity":"HIGH","score":8.5,"vendor":"WatchGuard","product":"Endpoint Security","kev":false,"epss":0.00191,"kevAdded":null},{"id":"CVE-2024-6594","published":"2024-09-25T11:22:45.610Z","updated":"2026-08-07T23:42:26.069Z","title":"WatchGuard Firebox Single Sign-On Client Denial-of-Service","severity":"HIGH","score":8.7,"vendor":"WatchGuard","product":"SSO Client","kev":false,"epss":0.00639,"kevAdded":null},{"id":"CVE-2024-6593","published":"2024-09-25T11:16:15.822Z","updated":"2026-08-07T23:42:01.345Z","title":"WatchGuard Firebox Single Sign-On Agent Management Interface Authentication Bypass","severity":"CRITICAL","score":9.3,"vendor":"WatchGuard","product":"SSO Agent","kev":false,"epss":0.00584,"kevAdded":null},{"id":"CVE-2024-6592","published":"2024-09-25T11:16:01.320Z","updated":"2026-08-07T23:46:43.531Z","title":"WatchGuard Firebox Single Sign-On Agent Protocol Authorization Bypass","severity":"CRITICAL","score":9.3,"vendor":"WatchGuard","product":"SSO Client","kev":false,"epss":0.01168,"kevAdded":null},{"id":"CVE-2024-5974","published":"2024-07-09T02:24:47.924Z","updated":"2026-08-07T22:06:38.938Z","title":"Firebox Authenticated Buffer Overflow Vulnerability","severity":"HIGH","score":8.6,"vendor":"WatchGuard","product":"Fireware OS","kev":false,"epss":0.01053,"kevAdded":null},{"id":"CVE-2024-4944","published":"2024-07-09T02:23:25.039Z","updated":"2026-08-07T22:14:28.436Z","title":"Mobile VPN with SSL Local Privilege Escalation Vulnerability","severity":"HIGH","score":8.6,"vendor":"WatchGuard","product":"Mobile VPN with SSL Client","kev":false,"epss":0.00336,"kevAdded":null},{"id":"CVE-2024-1417","published":"2024-05-16T17:56:43.521Z","updated":"2024-08-01T18:40:21.126Z","title":"Local Code Injection Vulnerability in AuthPoint Password Manager App for macOS Safari","severity":"HIGH","score":7.8,"vendor":"WatchGuard","product":"AuthPoint Password Manager","kev":false,"epss":0.00721,"kevAdded":null}]}