WatchGuard security advisories, December 2025

Every WatchGuard security advisory published in December 2025, from WatchGuard PSIRT Advisories via NVD, with its severity, CVEs and CISA KEV status. Open a record for affected and fixed versions and the vendor's own link.

Advisories: 14
Critical: 1
High: 6
In CISA KEV: 1
CVEs: 14

WatchGuard advisories published in December 2025

Dec 19, 2025
Critical [CVE-2025-14733] WatchGuard Firebox iked Out of Bounds Write Vulnerability
Critical9.3ExploitedCISA KEV
Dec 4, 2025
High [CVE-2025-1547] WatchGuard Firebox Authenticated Stack Overflow in Certificate Request Command
High7.5
Dec 4, 2025
High [CVE-2025-1545] WatchGuard Firebox XPath Injection Vulnerability in Web CGI
High8.2
Dec 4, 2025
High [CVE-2025-11838] WatchGuard Firebox iked Memory Corruption Vulnerability
High8.7
Dec 4, 2025
High [CVE-2025-12196] WatchGuard Firebox Authenticated Out of Bounds Write in Management CLI Ping Command
High8.6
Dec 4, 2025
High [CVE-2025-12195] WatchGuard Firebox Authenticated Out of Bounds Write in Management CLI IPSec Configuration
High8.6
Dec 4, 2025
High [CVE-2025-12026] WatchGuard Firebox Authenticated Out of Bounds Write in certd
High8.6
Dec 4, 2025
Medium [CVE-2025-1910] WatchGuard Mobile VPN with SSL Local Privilege Escalation via Update Package
Medium6.3
Dec 4, 2025
Medium [CVE-2025-6946] WatchGuard Firebox Stored Cross-Site-Scripting (XSS) Vulnerability in IPS Configuration
Medium4.8
Dec 4, 2025
Medium [CVE-2025-13940] WatchGuard Firebox Boot Time System Integrity Check Bypass
Medium6.7
Dec 4, 2025
Medium [CVE-2025-13939] WatchGuard Firebox Stored Cross-Site-Scripting (XSS) Vulnerability in Gateway Wireless Controller
Medium4.8
Dec 4, 2025
Medium [CVE-2025-13938] WatchGuard Firebox Stored Cross-Site-Scripting (XSS) Vulnerability in Autotask Technology Integration Configuration
Medium4.8
Dec 4, 2025
Medium [CVE-2025-13937] WatchGuard Firebox Stored Cross-Site-Scripting (XSS) Vulnerability in ConnectWise Technology Integration Configuration
Medium4.8
Dec 4, 2025
Medium [CVE-2025-13936] WatchGuard Firebox Stored Cross-Site-Scripting (XSS) Vulnerability in Tigerpaw Technology Integration Configuration
Medium4.8

Get an email when WatchGuard publishes the next one.

See WatchGuard's last 90 days of advisories first. Then choose one product with live alerts free for life, or a free month of real-time alerts on everything with the severity, the fixed version and the vendor's link (card needed, then US$15/month; we email you before the first charge).

Alert me about WatchGuard

Dates are each advisory's publication date at the source, in UTC; a record with no source date is filed under the day VulniPulse first saw it.