Watchguard

Fireware

69 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
7.2

CVE-2026-13383

  • EPSS 0.6%
  • Veröffentlicht 02.07.2026 23:05:53
  • Zuletzt bearbeitet 10.08.2026 18:17:40

An Out-of-bounds Write vulnerability in WatchGuard Fireware OS ikestubd process could allow an authenticated privileged user to execute arbitrary code via a specially crafted requests to the Management Web UI.

4.8

CVE-2026-13377

  • EPSS 0.17%
  • Veröffentlicht 02.07.2026 23:05:32
  • Zuletzt bearbeitet 10.08.2026 18:17:40

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in WatchGuard Fireware OS SIP Proxy module allows Stored XSS. This vulnerability is an additional unmitigated attack path for CVE-2025-6947.

4.8

CVE-2026-13376

  • EPSS 0.17%
  • Veröffentlicht 02.07.2026 23:05:26
  • Zuletzt bearbeitet 10.08.2026 18:17:40

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in WatchGuard Fireware OS spamBlocker module allows Stored XSS. This vulnerability is an additional unmitigated attack path for CVE-2025-1071. ...

4.8

CVE-2026-13375

  • EPSS 0.17%
  • Veröffentlicht 02.07.2026 23:05:20
  • Zuletzt bearbeitet 10.08.2026 18:17:40

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in WatchGuard Fireware OS (Autotask Technology Integration module) allows Stored XSS. This vulnerability is an additional unmitigated attack pat...

4.8

CVE-2026-13374

  • EPSS 0.17%
  • Veröffentlicht 02.07.2026 23:05:13
  • Zuletzt bearbeitet 10.08.2026 18:17:40

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in WatchGuard Fireware OS (ConnectWise Technology Integration module) allows Stored XSS. This vulnerability is an additional unmitigated attack ...

4.8

CVE-2026-13373

  • EPSS 0.17%
  • Veröffentlicht 02.07.2026 23:05:00
  • Zuletzt bearbeitet 10.08.2026 18:17:39

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in WatchGuard Fireware OS (Tigerpaw Technology Integration module) allows Stored XSS. This vulnerability is an additional unmitigated attack pat...

4.9

CVE-2026-13371

  • EPSS 0.35%
  • Veröffentlicht 02.07.2026 23:04:42
  • Zuletzt bearbeitet 14.08.2026 13:00:12

An authenticated administrator can trigger a denial-of-service condition in the Fireware Management Web UI by sending malformed or crafted data to the put_data endpoint, which performs unsafe deserialization of the attacker-supplied input.

7.2

CVE-2026-3987

Medienbericht
  • EPSS 0.68%
  • Veröffentlicht 01.04.2026 21:32:30
  • Zuletzt bearbeitet 14.08.2026 13:30:09

A path traversal vulnerability in the Fireware OS Web UI on WatchGuard Firebox systems may allow a privileged authenticated remote attacker to execute arbitrary code in the context of an elevated system process.

6.5

CVE-2026-4315

  • EPSS 0.17%
  • Veröffentlicht 30.03.2026 12:38:15
  • Zuletzt bearbeitet 14.08.2026 13:34:57

A Cross-Site Request Forgery (CSRF) vulnerability in the WatchGuard Fireware OS WebUI could allow a remote attacker to trigger a denial-of-service (DoS) condition in the Fireware Web UI by convincing an authenticated administrator into visiting a mal...

6.7

CVE-2026-4266

  • EPSS 0.27%
  • Veröffentlicht 30.03.2026 12:38:01
  • Zuletzt bearbeitet 14.08.2026 13:38:15

An Insecure Deserialization vulnerability in WatchGuard Fireware OS allows an attacker that has obtained write access to the local filesystem through another vulnerability to execute arbitrary code in the context of the portald user. Note, this vuln...