W
Vendor security profile4 actively exploited CVEs
watchguard
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs112
Critical16
CISA KEV4
Public exploit4
Patch rate%13
Avg. CVSS7.4
12-month vulnerability rate
0
14
1
0
4
1
5
0
17
30
19
1
CVE KEV
CVE severity distribution
112toplam CVE
Critical16 (14%)
High56 (50%)
Medium38 (34%)
Uncertain2 (2%)
Patch and exploitation view
%13
Verified patch
%4
CISA KEV
%4
Public exploit
15Patch available
0Partial
4Workaround
0Vendor: no patch
93Unknown
Latest vulnerabilities
9.3
CVE-2026-13043
WatchGuard Endpoint Security Missing Authentication in Kernel Memory Access Driver Allows Arbitrary Kernel Memory Access
W
Patch status unknownEPSS %0
8.7
CVE-2026-86134
Fireware OS Pre-Authentication NULL Pointer Dereference Allows Remote Denial of Service
W
Patch verifiedEPSS %0
8.7
CVE-2026-86104
Fireware OS Resource Exhaustion in Login Process Allows Denial of Service
W
Patch verifiedEPSS %0
8.6
CVE-2026-18145
Fireware OS Stack-based Buffer Overflow in spamd Allows Remote Code Execution
W
Patch verifiedEPSS %0
7.2
CVE-2026-86101
Fireware OS Authorization Bypass in SAML Login Allows Unauthorized SSLVPN Access
W
Patch verifiedEPSS %0
7.5
CVE-2026-13046
Fireware OS Deserialization of Untrusted Data in samld Allows Remote Code Execution
W
Patch verifiedEPSS %0
9.2
CVE-2026-86131
Fireware OS Code Injection in BOVPN Over TLS Client Allows Remote Code Execution
W
Patch verifiedEPSS %0
8.2
CVE-2026-13224
Fireware OS Path Traversal in WebUI Management Agent Allows Arbitrary Local File Read
W
Patch verifiedEPSS %0
8.2
CVE-2026-86133
Fireware OS Pre-Authentication Integer Underflow in iked Allows Remote Denial of Service
W
Patch verifiedEPSS %0
7.1
CVE-2026-90441
Fireware OS Missing Authorization in wgagent Management API Allows Denial of Service - Variant B
W
Patch verifiedEPSS %0