VENDOR

WatchGuard vulnerabilities: CVEs, exploitation and patches

Every WatchGuard CVE reviewed by Diras Labs analysts, newest first, with exploitation status and fixes.

CVE-2026-86131
WatchGuard Fireware OS BOVPN Over TLS code injection remote root execution WatchGuard Fireware OS · Sep 30, 2026
- PATCH AVAILABLE
CRITICAL 9.2
CVE-2026-101891
WatchGuard AP improper access control allows unauthenticated API session WatchGuard WatchGuard AP · Sep 30, 2026
- PATCH AVAILABLE
CRITICAL 9.3
CVE-2026-86102
WatchGuard AP OS command injection in internal API allows remote code execution WatchGuard WatchGuard AP · Sep 30, 2026
- PATCH AVAILABLE
CRITICAL 9.3