coldbraid

CVE-2025-9242 WatchGuard Firebox

WatchGuard Firebox contains an out-of-bounds write vulnerability in the OS iked process that may allow a remote unauthenticated attacker to execute arbitrary code.

CVSS
not scored

CWE-787

On CISA’s exploited list

WatchGuard Firebox Out-of-Bounds Write Vulnerability

Added
2025-11-12
Federal patch deadline
2025-12-03
Ransomware use
not known