# Watchguard Fireware


- [CVE-2022-26318](https://insights.sbomify.com/CVE-2022-26318/): WatchGuard Firebox and XTM Appliances Arbitrary Code Execution (critical 9.8, exploited in the wild)
- [CVE-2025-14733](https://insights.sbomify.com/CVE-2025-14733/): WatchGuard Firebox Out of Bounds Write (critical 9.3, exploited in the wild)
- [CVE-2025-9242](https://insights.sbomify.com/CVE-2025-9242/): WatchGuard Firebox Out-of-Bounds Write (critical 9.3, exploited in the wild)
- [CVE-2022-23176](https://insights.sbomify.com/CVE-2022-23176/): WatchGuard Firebox and XTM Privilege Escalation (high 8.8, exploited in the wild)
- [CVE-2022-31789](https://insights.sbomify.com/CVE-2022-31789/): Integer overflow in n/a (critical 9.8)
- [CVE-2013-6021](https://insights.sbomify.com/CVE-2013-6021/): Memory corruption in n/a (critical 9.3)
- [CVE-2026-86131](https://insights.sbomify.com/CVE-2026-86131/): Fireware OS Code Injection in BOVPN Over TLS Client Allows Remote Code Execution (critical 9.2)
- [CVE-2026-13368](https://insights.sbomify.com/CVE-2026-13368/): WatchGuard Firebox Race Condition and Use-After-Free in Mobile VPN with IKEv2 LDAP Authentication (critical 9.2)
- [CVE-2022-25361](https://insights.sbomify.com/CVE-2022-25361/): Path traversal in n/a (critical 9.1)
- [CVE-2022-25291](https://insights.sbomify.com/CVE-2022-25291/): Integer overflow in n/a (high 8.8)
- [CVE-2022-25292](https://insights.sbomify.com/CVE-2022-25292/): Memory corruption in n/a (high 8.8)
- [CVE-2022-25293](https://insights.sbomify.com/CVE-2022-25293/): Memory corruption in n/a (high 8.8)

---
From sbomify Insights: https://insights.sbomify.com/products/watchguard/fireware/