Fireware Os
Approved changes feed: RSS · Atom
cpe:2.3:a:watchguard:fireware_os:*:*:*:*:*:*:*:12.0
part: a version: * update: *
| Vendor | Watchguard (ec468727-86da-5bb0-9483-b62749e25478) |
|---|---|
| Product | Fireware Os (61450564-b43a-5239-8e0b-ad6e851d5a0d) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | 12.0 |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-8247 |
vulnerable | 2026-07-29 01:09:05.693995 |
WatchGuard Firebox admd Out of Bounds Write Vulnerability
An Out-of-bounds Write vulnerability in WatchGuard Fireware OS may allow an unauthenticated attacker on the same local network segment to execute arbitrary code.
This vulnerability affects Fireware OS 11.0 up to and including 11.12.4_Update1, 12.0 up to and including 12.12 and 2025.1 up to and including 2026.2.
Published: 2026-07-02T23:07:16.148Z
Updated: 2026-07-07T03:56:33.916Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-13722 |
vulnerable | 2026-07-29 00:23:33.241313 |
WatchGuard Firebox Firmware Image Validation Bypass in WatchGuard Fireware OS
WatchGuard Fireware OS contains a firmware validation bypass when processing a backup image via the backup/restore feature. An authenticated administrator can exploit this vulnerability to install a tampered firmware image.This vulnerability affects Fireware OS 11.0 up to and including 11.12.4_Update1, 12.0 up to and including 12.12 and 2025.1 up to and including 2025.6.2.
Published: 2026-07-02T23:06:12.339Z
Updated: 2026-07-07T03:56:36.130Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-13377 |
vulnerable | 2026-07-29 00:23:32.993509 |
WatchGuard Firebox Stored Cross-Site-Scripting (XSS) Vulnerability in SIP Proxy Configuration
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in WatchGuard Fireware OS SIP Proxy module allows Stored XSS. This vulnerability is an additional unmitigated attack path for CVE-2025-6947.
This issue affects Fireware OS 12.0 up to and including 12.12, 12.5 up to and including 12.5.18, and 2025.1 up to and including 2026.2.
Published: 2026-07-02T23:05:32.445Z
Updated: 2026-07-06T15:02:58.909Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-13376 |
vulnerable | 2026-07-29 00:23:32.992925 |
WatchGuard Firebox Stored Cross-Site-Scripting (XSS) Vulnerability in spamBlocker Module
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in WatchGuard Fireware OS spamBlocker module allows Stored XSS. This vulnerability is an additional unmitigated attack path for CVE-2025-1071.
This issue affects Fireware OS 12.0 up to and including 12.12, 12.5 up to and including 12.5.18, and 2025.1 up to and including 2026.2.
Published: 2026-07-02T23:05:26.669Z
Updated: 2026-07-06T15:03:24.964Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-13371 |
vulnerable | 2026-07-29 00:23:32.987239 |
WatchGuard Firebox Management Web UI Denial of Service via Unsafe Deserialization
An authenticated administrator can trigger a denial-of-service condition in the Fireware Management Web UI by sending malformed or crafted data to the put_data endpoint, which performs unsafe deserialization of the attacker-supplied input.
Published: 2026-07-02T23:04:42.674Z
Updated: 2026-07-07T17:01:52.545Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-13084 |
vulnerable | 2026-07-29 00:23:32.810655 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-13079 |
vulnerable | 2026-07-29 00:23:32.801301 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-13054 |
vulnerable | 2026-07-29 00:23:32.793731 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-13053 |
vulnerable | 2026-07-29 00:23:32.793227 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-13050 |
vulnerable | 2026-07-29 00:23:32.781716 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-4315 |
vulnerable | 2026-06-08 08:05:13.224882 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-3344 |
vulnerable | 2026-06-08 08:01:18.475610 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-3342 |
vulnerable | 2026-06-08 08:01:18.429417 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-1498 |
vulnerable | 2026-06-08 07:49:08.768639 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-9242 |
vulnerable | 2026-06-08 07:45:21.960045 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-6999 |
vulnerable | 2026-06-08 07:43:16.834091 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-6946 |
vulnerable | 2026-06-08 07:43:16.686458 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-1547 |
vulnerable | 2026-06-08 07:08:37.258516 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-1545 |
vulnerable | 2026-06-08 07:08:37.225308 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-14733 |
vulnerable | 2026-06-08 07:06:35.022963 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-13939 |
vulnerable | 2026-06-08 07:06:33.090456 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-12026 |
vulnerable | 2026-06-08 07:04:29.566334 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.