Skip to content
Edition of Sunday, November 8, 2026
Daily CISO

The five-minute briefing for security leaders.

Security vendor · Firewalls and NGFW · in CISA KEV

WatchGuard Technologies in the CISA KEV catalog

CISA’s Known Exploited Vulnerabilities catalog lists 4 entries for WatchGuard Technologies as of catalog version 2026.11.06, released November 6, 2026. The newest was added December 19, 2025, and the latest federal due date is December 26, 2025. CISA marks 1 of them as known ransomware use.

Updated

entries in the catalog
4
newest addition
December 19, 2025
latest federal due date
December 26, 2025
marked known ransomware use
1

Directory record

Website
www.watchguard.com
Categories
Firewalls and NGFW (primary), Identity threat detection and response, EDR and XDR, Workforce IAM and SSO
Headquarters
Seattle, United States
Founded
Not established
Ownership
Owned by Vector Capital since 2022
Company record
WatchGuard Technologies on CISO Tribune

Directory data as of November 8, 2026. What the company sells, and the source for every fact, is on its CISO Tribune page.

KEV entries, newest first

Filed by CISA under the name “WatchGuard”. Each row links to the CVE’s NVD record; entries added in the last 45 days also link to their place on must-patch. The due date is CISA’s remediation deadline for federal civilian agencies, as the feed states it.

  1. Added December 19, 2025

    CVE-2025-14733 WatchGuard Firebox Out of Bounds Write Vulnerability

    Firebox · known ransomware use

    Due December 26, 2025

  2. Added November 12, 2025

    CVE-2025-9242 WatchGuard Firebox Out-of-Bounds Write Vulnerability

    Firebox

    Due December 3, 2025

  3. Added April 11, 2022

    CVE-2022-23176 WatchGuard Firebox and XTM Privilege Escalation Vulnerability

    Firebox and XTM

    Due May 2, 2022

  4. Added March 25, 2022

    CVE-2022-26318 WatchGuard Firebox and XTM Appliances Arbitrary Code Execution

    Firebox and XTM Appliances

    Due April 15, 2022

Snapshot of CISA’s feed taken November 7, 2026; the whole catalog is counted on the KEV tracker.

On Daily CISO, newest first

  1. Weekly archive · Dec 22 – Dec 28, 2025

    WatchGuard Firebox Firewalls Face Active Exploitation

  2. Weekly archive · Nov 10 – Nov 16, 2025

    CISA Adds WatchGuard, Gladinet, and Microsoft Flaws to KEV Catalog

  3. Weekly archive · Feb 21 – Feb 27, 2022

    Sandworm's Cyclops Blink replaces VPNFilter on WatchGuard firewalls

Sources

  1. Cybersecurity and Infrastructure Security Agency, KEV catalog · primary source
  2. Cybersecurity and Infrastructure Security Agency, KEV JSON feed (catalog version 2026.11.06), published November 6, 2026 · primary source
  3. CISO Tribune, vendor directory record for WatchGuard Technologies, published November 8, 2026