WatchGuard Fireware OS: Critical Firewall Vulnerabilities and New Penetrator

WatchGuard Fireware OS: Critical Firewall Vulnerabilities and New Penetrator Checks

On 27 October 2026, WatchGuard disclosed serious vulnerabilities affecting Fireware OS, including CVE-2026-93857, CVE-2026-93865 and CVE-2026-93866. All three are rated Critical (CVSS 9.2).

Depending on configuration, the flaws may permit unauthenticated code execution through the SIP proxy, privileged FireCluster actions or Access Portal memory corruption.

SecPoint Penetrator now includes targeted remote WatchGuard firmware assessments, identifying Fireware OS versions affected by these CVEs when reliable version information is available.

Our comprehensive vulnerability scanning platform helps organizations discover exposed infrastructure, prioritize security updates and strengthen vulnerability management across vendors.

Apply Fireware OS 2026.4, 12.12.4 or 12.5.22 for applicable T15/T35 devices.

Request a product demo:
https://www.secpoint.com/contact-us.html

Become a SecPoint partner:
https://www.secpoint.com/partner-signup.html

Get a FREE vulnerability scan:
https://www.secpoint.com/free-vulnerability-scan.html

#SecPoint #WatchGuard #FirewareOS #VulnerabilityScanning #CyberSecurity