Summary
WatchGuard Fireware OS iked process contains an out of bounds write vulnerability in the OS iked process. This vulnerability may allow a remote unauthenticated attacker to execute arbitrary code and affects both the mobile user VPN with IKEv2 and the branch office VPN using IKEv2 when configured with a dynamic gateway peer.
- Vendor
- WatchGuard
- Product
- Firebox
- Added to KEV
- Dec 19, 2025
- Remediation due
- Dec 26, 2025 (US federal deadline)
- Ransomware use
- Known
- Weakness
- CWE-787
- EPSS
- 29.4% as of Nov 10
In the news · last mention Nov 10
Linked
Actors named alongside it:
none
Incidents exploiting it:
- none recorded
References