Tuesday, August 11, 2026
LIVEThe Unrelenting Cyber Battle: Hacking Threats and the Imperative of Robust Data Protection///Navigating the Cyber Labyrinth: Bolstering Defenses Against Evolving Hacking Threats///The Dual Front War: Battling Hacking and Bolstering Data Protection in the Digital Age///The Ever-Evolving Cyber Threat Landscape: Navigating Hacking and Fortifying Data Protection///The Unseen Battle: Fortifying Data in an Age of Relentless Hacking///The Unseen War: Hacking's Relentless Advance and the Imperative of Data Protection///The Evolving Threat Landscape: Hacking, Data Protection, and the Imperative for Proactive Security///Navigating the Digital Minefield: Bolstering Data Protection in an Era of Relentless Hacking///The Dual Fronts of Digital Defense: Combating Hacking and Fortifying Data Protection///Hacking's New Frontier: Fortifying Data Protection in the Age of Advanced Cyber Threats///The Dual Front: Navigating Hacking Threats and Fortifying Data Protection in the Digital Age///Navigating the Digital Gauntlet: The Evolving Nexus of Hacking and Data Protection///The Unrelenting Cyber Battle: Hacking Threats and the Imperative of Robust Data Protection///Navigating the Cyber Labyrinth: Bolstering Defenses Against Evolving Hacking Threats///The Dual Front War: Battling Hacking and Bolstering Data Protection in the Digital Age///The Ever-Evolving Cyber Threat Landscape: Navigating Hacking and Fortifying Data Protection///The Unseen Battle: Fortifying Data in an Age of Relentless Hacking///The Unseen War: Hacking's Relentless Advance and the Imperative of Data Protection///The Evolving Threat Landscape: Hacking, Data Protection, and the Imperative for Proactive Security///Navigating the Digital Minefield: Bolstering Data Protection in an Era of Relentless Hacking///The Dual Fronts of Digital Defense: Combating Hacking and Fortifying Data Protection///Hacking's New Frontier: Fortifying Data Protection in the Age of Advanced Cyber Threats///The Dual Front: Navigating Hacking Threats and Fortifying Data Protection in the Digital Age///Navigating the Digital Gauntlet: The Evolving Nexus of Hacking and Data Protection///
Subscribe
Cyber Security
Independent · Digital
Thehackingpost
RSSSubscribe
CybersecurityAI-assisted

Critical WatchGuard Firebox Vulnerabilities Let Attackers Bypass Integrity Checks and Inject Malicious Codes

Critical security vulnerabilities have been identified in Firebox firewall devices, necessitating immediate attention due to the presence of ten severe issues.

MBy Mark JensenDec 08, 20252 min read

Critical security vulnerabilities have been identified in Firebox firewall devices, necessitating immediate attention due to the presence of ten severe issues.

Disclosed on Thu, Dec 4, 2025, these vulnerabilities in WatchGuard include various severity levels and attack vectors, some of which require urgent patching to prevent unauthorized code execution and information disclosure.

High-Severity Code Execution Vulnerabilities

Vulnerabilities CVE-2025-12195 and CVE-2025-12196, both with CVSS scores of 8.6, allow privileged users to bypass security controls via specially crafted IPSec configurations and ping commands. Similarly, CVE-2025-12026 in the certificate request functionality also carries a CVSS score of 8.6, enabling administrative-level privilege abuse.

The integrity and availability of Firebox systems are further compromised by CVE-2025-13940, which bypasses boot-time system integrity checks. Additionally, CVE-2025-11838, a memory corruption vulnerability in the IKE daemon, can trigger denial-of-service conditions, scoring 8.7 on the CVSS scale and affecting systems with IKEv2 VPN configurations and dynamic gateway peers.

Similarly, CVE-2025-12026 in the certificate request functionality also carries a CVSS score of 8.6, enabling administrative-level privilege abuse.
Mark Jensen · Thehackingpost

CVE-2025-13940 : Boot Time System Integrity Check Bypass - CVSS Score: 6.7 (Medium) CVE-2025-1545 : XPath Injection in Web CGI - CVSS Score: 8.2 (High) CVE-2025-13939 : Stored XSS in Gateway Wireless Controller - CVSS Score: 4.8 (Medium) CVE-2025-13938 : Stored XSS in Autotask Technology Integration - CVSS Score: 4.8 (Medium) CVE-2025-13937 : Stored XSS in ConnectWise Technology Integration - CVSS Score: 4.8 (Medium) CVE-2025-13936 : Stored XSS in Tigerpaw Technology Integration - CVSS Score: 4.8 (Medium) CVE-2025-12196 : Out of Bounds Write in CLI Ping Command - CVSS Score: 8.6 (High) CVE-2025-12195 : Out of Bounds Write in IPSec Configuration - CVSS Score: 8.6 (High) CVE-2025-11838 : iked Memory Corruption Vulnerability - CVSS Score: 8.7 (High) CVE-2025-12026 : Out of Bounds Write in certd - CVSS Score: 8.6 (High)

Additionally, CVE-2025-1545 exploits XPath injection in web CGI interfaces, allowing unauthenticated attackers to extract sensitive configuration data. This vulnerability is rated 8.2 on the CVSS scale and poses a critical data exposure risk.

Furthermore, WatchGuard has addressed six stored cross-site scripting (XSS) vulnerabilities affecting third-party technology integration modules, including ConnectWise, Autotask, Tigerpaw, and Gateway Wireless Controller configurations. Although individually rated as medium severity, these flaws enable session hijacking and configuration tampering when attackers gain administrative access.

Advertisement

All vulnerabilities have been resolved in the patched versions: Fireware OS 2025.1.3, 12.11.5, and 12.5.14 for affected platforms. Organizations operating Firebox appliances must prioritize immediate updates, particularly those that expose management interfaces or run legacy IPSec configurations.

Based on reporting by Cyber Security News.

AI transparency. This article was produced with the assistance of artificial intelligence and published under human editorial oversight. AI systems can make mistakes. Read how we use AI (EU AI Act, Art. 50).
Related Stories
Cybersecurity

Why Fintech Banking Platforms Are Reducing Operational Costs by 40%

Paige Monroe · Mar 26, 2026
Cybersecurity

Dogecoin Price Prediction: SHIB Burns 172M Tokens as Pepeto Exchange Earns From Every Trade

Eric Wallace · Mar 26, 2026
Cybersecurity

Solana Price Prediction: SOL Holds $86 With Commodity Status as Pepeto Targets Bigger Returns

Zachary Burns · Mar 26, 2026
Cybersecurity

Open Directory Malware Campaign Uses Obfuscated VBS, PNG Loaders and RAT Payloads

Joseph Cain · Mar 26, 2026