Vulnerabilidades em WatchGuard
138 resultadosAnálise Vexday
WatchGuard acumula 62 vulnerabilidades no histórico, com 21 publicadas nos últimos 90 dias indicando ritmo elevado de descobertas; cinco são críticas e duas estão sob exploração ativa em campo. A fraqueza dominante (CWE-79, injeção de código) sugere falhas sistemáticas em validação de entrada, exigindo priorização imediata de patches para as duas vulnerabilidades em KEV e revisão ampla da postura de segurança do fornecedor.
CVE-2025-6946MEDIUMWatchGuard Firebox Stored Cross-Site-Scripting (XSS) Vulnerability in IPS ConfigurationEPSS 0.3%CVE-2026-41287HIGHStack-based Buffer Overflow in WatchGuard Agent Discovery Service on Windows Causes Denial of Service - Variant AEPSS 0.3%CVE-2026-41286HIGHStack-based Buffer Overflow in WatchGuard Agent Discovery Service on Windows Causes Denial of Service - Variant BEPSS 0.3%CVE-2026-86135HIGHDimension CSRF Vulnerability in Database Snapshot Creation Allows Denial of ServiceEPSS 0.2%CVE-2026-57910CRITICALWatchGuard Agent improper authentication allows unauthenticated remote code executionEPSS 0.2%CVE-2026-90442HIGHFireware OS Authenticated Stack Buffer Overflow in certd Allows Denial of ServiceEPSS 0.2%CVE-2026-3343MEDIUMWatchGuard Firebox Reflected Cross-Site-Scripting (XSS) Vulnerability in Fireware Web UIEPSS 0.2%CVE-2026-18105HIGHFireware OS Uncontrolled Resource Consumption in Diagnostic Tasks Allows Denial of ServiceEPSS 0.2%CVE-2025-0178MEDIUMWatchGaurd Firebox Host Header Injection VulnerabilityEPSS 0.2%CVE-2026-90465HIGHFireware OS Missing Authentication in FireCluster Sync Allows Privilege EscalationEPSS 0.2%CVE-2026-86101HIGHFireware OS Authorization Bypass in SAML Login Allows Unauthorized SSLVPN AccessEPSS 0.2%CVE-2026-90441HIGHFireware OS Missing Authorization in wgagent Management API Allows Denial of Service - Variant BEPSS 0.2%CVE-2026-78610HIGHDimension CSRF Vulnerability in Administrator Passphrase Change EndpointEPSS 0.2%CVE-2026-13728MEDIUMWatchGuard Firebox Hardcoded Fallback Encryption Key in Access Portal Resource Credential DatabaseEPSS 0.2%CVE-2025-13938MEDIUMWatchGuard Firebox Stored Cross-Site-Scripting (XSS) Vulnerability in Autotask Technology Integration ConfigurationEPSS 0.2%CVE-2025-13937MEDIUMWatchGuard Firebox Stored Cross-Site-Scripting (XSS) Vulnerability in ConnectWise Technology Integration ConfigurationEPSS 0.2%CVE-2025-13939MEDIUMWatchGuard Firebox Stored Cross-Site-Scripting (XSS) Vulnerability in Gateway Wireless ControllerEPSS 0.2%CVE-2025-13936MEDIUMWatchGuard Firebox Stored Cross-Site-Scripting (XSS) Vulnerability in Tigerpaw Technology Integration ConfigurationEPSS 0.2%CVE-2026-81433HIGHFireware OS Pre-Authentication Stack Buffer Overflow in fingerd Allows Remote Code ExecutionEPSS 0.2%CVE-2024-8424HIGHWatchGuard Endpoint Protection Privilege Escalation in PSANHost Enables Arbitrary File Delete as SYSTEMEPSS 0.2%