Known vulnerabilities in Fireware OS 11.12.4 Update 1
Vendor:
WatchGuard
Software:
Fireware OS
Version:
11.12.4 Update 1
Software CPE:
cpe:2.3:o:watchguard:fireware_os:*:*:*:*:*:*:*:*
Website:
https://www.watchguard.com/
Total vulnerabilities:
14
Public exploits:
1
Known exploited (KEV):
2
Highest CVSSv4 Score:
9.3
Vulnerabilities by Severity
12.5.19
2026.2.1
12.12.1
2026.3
2026.2
12.12
12.5.18
12.5.17
12.11.8
2026.1.2
2026.1.1
12.11.7
12.5.16
2026.1
12.3.1 Update 4
12.5.15
12.11.6
2025.1.4
12.7.2 Update 3
2025.1.3
12.11.5
12.5.14
2025.1.2
12.11.1
2025.1.1
2025.1
12.11.4
12.11.1 Update 1
12.11
12.10.4 Update 2
12.10.4 Update 1
12.10.4
12.10.3
12.10.2
12.10.1 Update 1
12.10.1
12.10
12.9.4
12.9.3
12.9.2
12.9 Update 1
12.9
12.8.3
12.8.2 Update 1
12.8.2
12.8.1
12.8 Update 1
12.8
12.7.2 Update 2
12.7.2 Update 1
12.7.2
12.7.1
12.7 Update 1
12.7
12.6.4
12.6.3
12.6.2 Update 3
12.6.2 Update 2
12.6.2 Update 1
12.6.2
12.6.1 Update 1
12.6.1
12.6
12.5.13
12.5.12 Update 2
12.5.12 Update 1
12.5.12
12.5.11
12.5.10
12.5.9 Update 2
12.5.9 Update 1
12.5.9
12.5.8
12.5.7 Update 3
12.5.7 Update 2
12.5.7 Update 1
12.5.7
12.5.6
12.5.5 Update 1
12.5.5
12.5.4
12.5.3 Update 1
12.5.3
12.5.2 Update 1
12.5.2
12.5.1 Update 1
12.5.1
12.5 Update 1
12.5
12.4.1 Update 1
12.4.1
12.4 Update 2
12.4 Update 1
12.4
12.3.1 Update 3
12.3.1 Update 2
12.3.1 Update 1
12.3.1
12.3 Update 1
12.3
12.2.1
12.2
12.1.4
12.1.3 Update 8
12.1.3 Update 7
12.1.3 Update 6
12.1.3 Update 5
12.1.3 Update 4
12.1.3 Update 3
12.1.3 Update 2
12.1.3 Update 1
12.1.3
12.1.2
12.1.1
12.1
12.0.2
12.0.1
11.12.4 Update 1
11.12.4
11.12.3
11.12.2 Update 1
11.12.2
11.12.1
11.12 Update 1
11.12
11.11.4 Update 2
11.11.4 Update 1
11.11.4
11.11.3
11.11.2
11.11.1
11.11
11.10.7 Update 1
11.10.7
11.10.6
11.10.5
11.10.4
11.10.3 Update 1
11.10.3
11.10.2 Update 2
11.10.2 Update 1
11.10.2
11.10.1
11.10
11.9.6 Update 1
11.9.6
11.9.5
11.9.4 Update 1
11.9.4
11.9.3
11.9.2
11.9.1
11.9
11.8.4
11.8.3 Update 1
11.8.3
11.8.1
11.8
11.7.5
11.7.3 Update 1
11.7.3
11.7.2 Update 1
11.7.2
11.7.1
11.7
11.6.8
11.6.7
11.6.6
11.6.5
11.6.3
11.6.1
11.6
11.5.4
11.5.3
11.5.2 Update 1
11.5.2
11.5.1
11.5
11.4.2
11.4.1
11.4
11.3.2
11.3
12.11.3
12.11.2
12.0
-
Vulnerabilities (14)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU136893 - NULL Pointer Dereference CVE-2026-13084 |
CWE-476 | Medium | 12.12.1, 2026.2.1 | 03.07.2026 |
SB2026070353 |
||
| #VU136892 - Use After Free CVE-2026-13368 |
CWE-416 | High | 12.12.1, 2026.2.1 | 03.07.2026 |
SB2026070353 |
||
| #VU136891 - Improper Validation of Integrity Check Value CVE-2026-13722 |
CWE-354 | Low | 12.12.1, 2026.2.1 | 03.07.2026 |
SB2026070353 |
||
| #VU136882 - Out-of-bounds write CVE-2026-13053 |
CWE-787 | Low | 12.12.1, 2026.2.1 | 03.07.2026 |
SB2026070353 |
||
| #VU136881 - Out-of-bounds write CVE-2026-13050 |
CWE-787 | Low | 12.12.1, 2026.2.1 | 03.07.2026 |
SB2026070353 |
||
| #VU136880 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2026-13054 |
CWE-22 | Low | 12.12.1, 2026.2.1 | 03.07.2026 |
SB2026070353 |
||
| #VU136878 - Out-of-bounds write CVE-2026-8247 |
CWE-787 | High | 12.12.1, 2026.2.1 | 03.07.2026 |
SB2026070353 |
||
| #VU124661 - Cross-Site Request Forgery (CSRF) CVE-2026-4315 |
CWE-352 | Low | 12.5.18, 12.12, 2026.2 | 27.03.2026 |
SB2026032740 |
||
| #VU123429 - Out-of-bounds write CVE-2026-3342 |
CWE-787 | Low | 12.5.17, 12.11.8, 2026.1.2 | 03.03.2026 |
SB2026030321 |
||
| #VU120206 - Out-of-bounds write CVE-2025-14733 |
CWE-787 | Critical | 12.3.1 Update 4, 12.5.15, 12.11.6, 2025.1.4 | 19.12.2025 |
SB2025121911 |
||
| #VU119382 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2025-13939 |
CWE-79 | Low | 12.5.14, 12.11.5, 2025.1.3 | 08.12.2025 |
SB20251208134 |
||
| #VU119377 - Out-of-bounds write CVE-2025-12195 |
CWE-787 | Low | 12.5.14, 12.11.5, 2025.1.3 | 08.12.2025 |
SB20251208134 |
||
| #VU119374 - Improper Neutralization of Data within XPath Expressions CVE-2025-1545 |
CWE-643 | Medium | 12.5.14, 12.11.5, 2025.1.3 | 08.12.2025 |
SB20251208134 |
||
| #VU115852 - Out-of-bounds write CVE-2025-9242 |
CWE-787 | Critical | 12.3.1 Update 3, 12.5.13, 12.11.4, 2025.1.1 | 19.09.2025 |
SB2025091929 |