Vendor
WatchGuard
As of , 4 WatchGuard vulnerabilities are on CISA's list of exploited vulnerabilities, 1 of them used in ransomware campaigns; 0 were added in 2026. Patch first: CVE-2025-14733.
Patch first
| # | Vulnerability | Product | Our group | Listed | Deadline | EPSS |
|---|---|---|---|---|---|---|
| 1 | CVE-2025-14733Out of Bounds Write | WatchGuard Firebox | Patch nowRansomware use, listed within a year | 0.27 | ||
| 2 | CVE-2022-26318Arbitrary Code Execution | WatchGuard Firebox and XTM Appliances | Patch this weekMetasploit module; EPSS 0.78 | 0.78 | ||
| 3 | CVE-2025-9242Out-of-Bounds Write | WatchGuard Firebox | Patch this weekEPSS 0.91 | 0.91 | ||
| 4 | CVE-2022-23176Privilege Escalation | WatchGuard Firebox and XTM | Patch soon | 0.11 |
Products
- Firebox2 entries
- Firebox and XTM1 entry
- Firebox and XTM Appliances1 entry
Added each year
Show the numbers
| Period | entries added |
|---|---|
| 2022 | 2 |
| 2023 | none |
| 2024 | none |
| 2025 | 2 |
| 2026 | none |