WatchGuard Fireware OS security patch release for CVE-2025-9242
Security Patch Release
Summary
Hide ▲
Show ▼
WatchGuard released fixes for Fireware OS after a critical out-of-bounds write flaw, CVE-2025-9242, was disclosed as allowing unauthenticated remote code execution. The patch covers 2025.1, 12.x, 12.3.1 FIPS, and 12.5.x, while 11.x is end-of-life. Remediation is available in 2025.1.1, 12.11.4, 12.3.1_Update3, and 12.5.13.
Related Happenings
Check Point VPN CVE-2026-50751 targeted exploitation wave
Exploitation Wave
H score47
First: 08.06.2026 17:17
Last: 08.06.2026 17:17
Sources 1
About this happening:
**CVE-2026-50751** is an **active exploitation wave** against **Check Point Remote Access VPN** and **Mobile Access** deployments that use **deprecated IKEv1**. The flaw is an **a...
Check Point VPN CVE-2026-50751 targeted exploitation wave
Exploitation WaveAbout this happening: **CVE-2026-50751** is an **active exploitation wave** against **Check Point Remote Access VPN** and **Mobile Access** deployments that use **deprecated IKEv1**. The flaw is an **a...
Check Point security patch release for CVE-2026-50751
Security Patch Release
H score48
First: 08.06.2026 16:05
Last: 08.06.2026 16:05
Sources 1
About this happening:
**Check Point** released **security updates** to patch **CVE-2026-50751** in **Remote Access VPN** and **Mobile Access** deployments. The update addressed a **critical authenticat...
Check Point security patch release for CVE-2026-50751
Security Patch ReleaseAbout this happening: **Check Point** released **security updates** to patch **CVE-2026-50751** in **Remote Access VPN** and **Mobile Access** deployments. The update addressed a **critical authenticat...
Ivanti security patch release for CVE-2026-8043
Security Patch Release
H score25
First: 18.05.2026 13:54
Last: 18.05.2026 13:54
Sources 1
About this happening:
**Ivanti, Fortinet, SAP, Broadcom, and n8n** released **security fixes** on **2026-05-18** for flaws that could enable **authentication bypass**, **remote code execution**, **SQL...
Ivanti security patch release for CVE-2026-8043
Security Patch ReleaseAbout this happening: **Ivanti, Fortinet, SAP, Broadcom, and n8n** released **security fixes** on **2026-05-18** for flaws that could enable **authentication bypass**, **remote code execution**, **SQL...
Linux kernel security update for Copy Fail (CVE-2026-31431)
Security Patch Release
H score39
First: 30.04.2026 16:54
Last: 30.04.2026 16:54
Sources 1
About this happening:
**Linux kernel** maintainers have fixed **CVE-2026-31431** and are rolling out updates to close a **local privilege escalation** flaw that lets an unprivileged attacker gain **roo...
Linux kernel security update for Copy Fail (CVE-2026-31431)
Security Patch ReleaseAbout this happening: **Linux kernel** maintainers have fixed **CVE-2026-31431** and are rolling out updates to close a **local privilege escalation** flaw that lets an unprivileged attacker gain **roo...
PackageKit 1.3.5 security update (CVE-2026-41651)
Security Patch Release
H score31
First: 24.04.2026 20:28
Last: 24.04.2026 20:28
Sources 1
About this happening:
**PackageKit version 1.3.5** was released to fix **CVE-2026-41651**, closing a **local privilege-escalation** path that could let Linux users gain **root permissions**. The update...
PackageKit 1.3.5 security update (CVE-2026-41651)
Security Patch ReleaseAbout this happening: **PackageKit version 1.3.5** was released to fix **CVE-2026-41651**, closing a **local privilege-escalation** path that could let Linux users gain **root permissions**. The update...
Timeline
-
17.10.2025 12:25 5 articles · 8mo ago
WatchGuard patches Fireware OS CVE-2025-9242
Initial DisclosureWatchGuard Fireware OS was disclosed as recently patched for CVE-2025-9242, an out-of-bounds write in the iked process that could let a remote unauthenticated attacker execute arbitrary code through the IKEv2 VPN path. The affected branches are Fireware OS 11.10.2 through 11.12.4_Update1, 12.0 through 12.11.3, and 2025.1, with fixes in 2025.1.1, 12.11.4, 12.3.1_Update3, and 12.5.13, while 11.x has reached end-of-life.
Show sources
- Researchers Uncover WatchGuard VPN Bug That Could Let Attackers Take Over Devices — thehackernews.com — 17.10.2025 12:25
- Researchers Uncover WatchGuard VPN Bug That Could Let Attackers Take Over Devices — thehackernews.com — 17.10.2025 12:25
- Over 75,000 WatchGuard security devices vulnerable to critical RCE — www.bleepingcomputer.com — 20.10.2025 20:42
- Critical WatchGuard Fireware OS Flaw Enables Remote Code Execution — www.infosecurity-magazine.com — 21.10.2025 13:42
- CISA warns of WatchGuard firewall flaw exploited in attacks — www.bleepingcomputer.com — 13.11.2025 12:03