Hvězdička u CVE znamená, že jsem to číslo vytáhl z širšího textu článku. Neukazuju u něj proto KEV, EPSS ani CVSS, a to preventivně, protože článek se na něj mohl jen odkazovat, třeba jako na starší kauzu.
Serial number: AV26-1094 Date: October 28, 2026 As of October 27, 2026, WatchGuard is affected by vulnerabilities in the following products: Fireware OS Multiple versions Mobile VPN with SSL Client Prior to 2026.4 Prior to 12.0 The Cyber Centre encourages users and administrators to review the provided web link and apply any necessary updates as they become available. WatchGuard Security Advisories
WatchGuard CA
WatchGuard ha rilasciato aggiornamenti di sicurezza per sanare molteplici vulnerabilità, di cui 7 con gravità “critica” e 7 con gravità “alta”, in Fireware OS, sistema operativo utilizzato nei dispositivi di sicurezza perimetrale e di protezione delle reti. Tali vulnerabilità potrebbero consentire a un utente malintenzionato, in determinate condizioni, di eseguire codice arbitrario, di eludere i meccanismi di autenticazione, di accedere a informazioni sensibili o di compromettere la disponibilit
EPSS 0.01 CVE-2026-103593 CVE-2026-103594 CVE-2026-111107 CVE-2026-112709 CVE-2026-112710 CVE-2026-90442 CVE-2026-90464 CVE-2026-90465 CVE-2026-93434 CVE-2026-93857 CVE-2026-93862 CVE-2026-93864 CVE-2026-93865 CVE-2026-93866 WatchGuard IT
Classification: Important, Solution: Official Fix, Exploit Maturity: Not Defined, CVSSv3.1: 6.9, CVEs: CVE-2026-96293, Summary: A cleartext storage of sensitive information vulnerability in WatchGuard Endpoint Security's Full Disk Encryption feature for macOS allows a local, unprivileged user or process to obtain a managed computer's FileVault Personal Recovery Key by reading a persistently written diagnostic log file left readable by all local users.
EPSS 0.00 CVSS 6.9 CVE-2026-96293 WatchGuard FI
Classification: Severe, Solution: Official Fix, Exploit Maturity: Not Defined, CVSSv3.1: 7.3, CVEs: CVE-2026-115253, Summary: An incorrect permission assignment vulnerability in the WatchGuard Agent's log directory allows a local, authenticated non-administrative user to create, modify, append to, or delete the agent's log files and write other files into the directory. This allows an attacker to tamper with or destroy the agent's security logs and stage further local attacks by placing…
EPSS 0.00 CVSS 7.3 CVE-2026-115253 WatchGuard FI IT
A fake WatchGuard VPN download site steals SSL VPN credentials, then serves the real signed client. Learn how it works and how to spot it.
WatchGuard US
WatchGuard heeft meerdere kwetsbaarheden verholpen in Fireware OS. De impact van deze kwetsbaarheden varieert, net als de toegangsrechten die nodig zijn voor misbruik. - Een aanvaller met schrijfrechten op het systeem kan via een kwetsbaarheid in SAML single sign-on-sessies een kwaadaardig sessiebestand laden en arbitraire code uitvoeren. - Geauthenticeerde beheerders kunnen via path traversal in de WebUI Management Agent willekeurige lokale bestanden lezen. Een low-privileged geauthenticeerde…
WatchGuard NL
Serial number: AV26-990 Date: October 2, 2026 As of October 1, 2026, WatchGuard is affected by a vulnerability in the following product: Endpoint Security Prior to 8.00.26.0012 The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available. CVE-2026-13043 — WatchGuard Endpoint Security Missing Authentication in Kernel Memory Access Driver Allows Arbitrary Kernel Memory Access WatchGuard Security Advisories
EPSS 0.00 CVSS 9.3 CVE-2026-13043 WatchGuard CA IT FI
Serial number: AV26-981 Date: October 1, 2026 As of September 30, 2026, WatchGuard is affected by a vulnerability in the following product: Fireware OS Prior to 12.12.3 Prior to 12.5.21 Prior to 2026.2.3 Prior to 2026.3.2 The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available. CVE-2026-86134 — Fireware OS Pre-Authentication NULL Pointer Dereference Allows Remote Denial of Service WatchGuard Security…
EPSS 0.00 CVE-2026-86134 WatchGuard CA
Classification: Critical, Solution: Official Fix, Exploit Maturity: Not Defined, CVSSv3.1: 9.2, CVEs: CVE-2026-86134, CVE-2026-13046, CVE-2026-13224, CVE-2026-18105, CVE-2026-18145, CVE-2026-81433, CVE-2026-86101, CVE-2026-86104, CVE-2026-86105, CVE-2026-86128, CVE-2026-86131, CVE-2026-86132, CVE-2026-86133, CVE-2026-86136, CVE-2026-90441, Summary: CVE-2026-86134 (CVSS: 8.7): A NULL pointer dereference vulnerability in the WatchGuard Fireware OS authentication process allows a remote,…
EPSS 0.00 CVSS 9.2 CVE-2026-13046 CVE-2026-13224 CVE-2026-18105 CVE-2026-18145 CVE-2026-81433 CVE-2026-86101 CVE-2026-86104 CVE-2026-86105 CVE-2026-86128 CVE-2026-86131 CVE-2026-86132 CVE-2026-86133 CVE-2026-86134 CVE-2026-86136 CVE-2026-90441 WatchGuard FI
WatchGuard ha rilasciato aggiornamenti di sicurezza per risolvere molteplici vulnerabilità, di cui 1 con gravità "critica" e 13 con gravità "alta", presenti in Fireware OS, sistema operativo utilizzato nei dispositivi di sicurezza perimetrale e di protezione delle reti.
EPSS 0.00 CVE-2026-13046 CVE-2026-13224 CVE-2026-18105 CVE-2026-18145 CVE-2026-81433 CVE-2026-86101 CVE-2026-86104 CVE-2026-86128 CVE-2026-86131 CVE-2026-86132 CVE-2026-86133 CVE-2026-86134 CVE-2026-86136 CVE-2026-90441 WatchGuard IT
This vulnerability allows remote attackers to execute arbitrary code on affected installations of WatchGuard FireWare OS. An attacker must first obtain the ability to write to the samld session directory on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.5. The following CVEs are assigned: CVE-2026-13046.
EPSS 0.00 CVSS 7.5 CVE-2026-13046 WatchGuard US
This vulnerability allows remote attackers to execute arbitrary code on affected installations of WatchGuard FireWare OS. Authentication is required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.2. The following CVEs are assigned: CVE-2026-18145.
EPSS 0.00 CVSS 7.2 CVE-2026-18145 WatchGuard US
Serial number: AV26-972Date: September 29, 2026 As of September 28, 2026, WatchGuard is affected by vulnerabilities in the following product: WatchGuard AP Prior to 3.4.8 The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available. CVE-2026-101891 — WatchGuard AP Improper Access Control in API Service Allows Unauthenticated Access CVE-2026-86102 — WatchGuard AP Command Injection in Internal Management API Allows…
EPSS 0.02 CVE-2026-101891 CVE-2026-86102 CVE-2026-87969 WatchGuard CA IT
Rilevata una vulnerabilità di sicurezza con gravità "alta" in WatchGuard AuthPoint Authentication Gateway, componente on-premise della piattaforma MFA AuthPoint che collega Active Directory/LDAP e gestisce l'autenticazione RADIUS. Tale vulnerabilità, qualora sfruttata, potrebbe consentire ad un utente malintenzionato di eludere i meccanismi di autenticazione sui sistemi interessati.
EPSS 0.00 CVE-2026-95676 WatchGuard IT
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has confirmed that ransomware gangs are also exploiting a critical WatchGuard Firebox firewall vulnerability, which it flagged as actively exploited in December. [...]
CVE-2022-23176 * CVE-2025-14733 * CVE-2025-9242 * WatchGuard US
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of WatchGuard FireWare OS. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 8.8. The following CVEs are assigned: CVE-2026-13086.
EPSS 0.01 CVSS 8.8 CVE-2026-13086 WatchGuard US
WatchGuard heeft kwetsbaarheden verholpen in WatchGuard Fireware OS, specifiek in het iked-proces en de epm-service van het Mobile Security onderdeel. De kwetsbaarheden bevinden zich in het iked-proces en de epm-service van WatchGuard Fireware OS. Het iked-proces bevat een stack-based buffer overflow, een type confusion kwetsbaarheid en een heap overflow. Deze kwetsbaarheden kunnen worden misbruikt door een ongeauthenticeerde aanvaller door speciaal vervaardigd netwerkverkeer te verzenden. Dit…
WatchGuard NL
Serial Number: AV26-865Date: August 31, 2026 As of August 27, 2026, WatchGuard is affected by vulnerabilities in the following products: Dimension Prior to 2.3.1 Fireware OS Prior to 12.12.2 Prior to 12.5.20 Prior to 2026.2.2 The Cyber Centre encourages users and administrators to review the provided web link and apply any necessary updates as they become available. WatchGuard Security Advisories
WatchGuard CA
Aggiornamenti di sicurezza sanano numerose vulnerabilità, tra cui 5 con gravità "critica" e 12 con gravità “alta”, in prodotti WatchGuard. Tali vulnerabilità, qualora sfruttate, potrebbero consentire a un utente malintenzionato di eludere i meccanismi di autenticazione, eseguire codice arbitrario e/o compromettere la disponibilità del servizio sui sistemi interessati.
EPSS 0.01 CVE-2026-13086 CVE-2026-13108 CVE-2026-19313 CVE-2026-19314 CVE-2026-19315 CVE-2026-19316 CVE-2026-19317 CVE-2026-19318 CVE-2026-78008 CVE-2026-78009 CVE-2026-78010 CVE-2026-78011 CVE-2026-78174 CVE-2026-78610 CVE-2026-78612 CVE-2026-78613 CVE-2026-78614 WatchGuard IT
Serial Number: AV26-847Date: August 25, 2026 As of August 19, 2026, WatchGuard is affected by vulnerabilities in the following product: WatchGuard Agent Prior to 1.25.13.0000 The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available. WatchGuard Endpoint Security Prime Enhancements and Resolved Issues Security Advisories | WatchGuard Technologies
WatchGuard CA
Rilevate 2 vulnerabilità di sicurezza con gravità “critica” in WatchGuard Agent per Windows, noto agent di protezione endpoint per sistemi Windows utilizzato per il monitoraggio della sicurezza e l'applicazione di policy aziendali.
EPSS 0.00 CVE-2026-57909 CVE-2026-57910 WatchGuard IT
This vulnerability allows remote attackers to execute arbitrary code on affected installations of WatchGuard FireWare OS. Authentication is required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 4.7. The following CVEs are assigned: CVE-2026-13053.
EPSS 0.01 CVSS 4.7 CVE-2026-13053 WatchGuard US
This vulnerability allows remote attackers to execute arbitrary code on affected installations of WatchGuard FireWare OS. Authentication is required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.2. The following CVEs are assigned: CVE-2026-13050.
EPSS 0.01 CVSS 7.2 CVE-2026-13050 WatchGuard US
This vulnerability allows remote attackers to create arbitrary files on affected installations of WatchGuard FireWare OS. Authentication is required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.2. The following CVEs are assigned: CVE-2026-13054.
EPSS 0.01 CVSS 7.2 CVE-2026-13054 WatchGuard US
This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of WatchGuard FireWare OS. Authentication is not required to exploit this vulnerability, but only systems using VPN with IKEv2 are vulnerable. The ZDI has assigned a CVSS rating of 5.9. The following CVEs are assigned: CVE-2026-13084.
EPSS 0.01 CVSS 5.9 CVE-2026-13084 WatchGuard US
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of WatchGuard FireWare OS. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.5. The following CVEs are assigned: CVE-2026-8247.
EPSS 0.00 CVSS 7.5 CVE-2026-8247 WatchGuard US