Tuesday, August 11, 2026
LIVEThe Unrelenting Cyber Battle: Hacking Threats and the Imperative of Robust Data Protection///Navigating the Cyber Labyrinth: Bolstering Defenses Against Evolving Hacking Threats///The Dual Front War: Battling Hacking and Bolstering Data Protection in the Digital Age///The Ever-Evolving Cyber Threat Landscape: Navigating Hacking and Fortifying Data Protection///The Unseen Battle: Fortifying Data in an Age of Relentless Hacking///The Unseen War: Hacking's Relentless Advance and the Imperative of Data Protection///The Evolving Threat Landscape: Hacking, Data Protection, and the Imperative for Proactive Security///Navigating the Digital Minefield: Bolstering Data Protection in an Era of Relentless Hacking///The Dual Fronts of Digital Defense: Combating Hacking and Fortifying Data Protection///Hacking's New Frontier: Fortifying Data Protection in the Age of Advanced Cyber Threats///The Dual Front: Navigating Hacking Threats and Fortifying Data Protection in the Digital Age///Navigating the Digital Gauntlet: The Evolving Nexus of Hacking and Data Protection///The Unrelenting Cyber Battle: Hacking Threats and the Imperative of Robust Data Protection///Navigating the Cyber Labyrinth: Bolstering Defenses Against Evolving Hacking Threats///The Dual Front War: Battling Hacking and Bolstering Data Protection in the Digital Age///The Ever-Evolving Cyber Threat Landscape: Navigating Hacking and Fortifying Data Protection///The Unseen Battle: Fortifying Data in an Age of Relentless Hacking///The Unseen War: Hacking's Relentless Advance and the Imperative of Data Protection///The Evolving Threat Landscape: Hacking, Data Protection, and the Imperative for Proactive Security///Navigating the Digital Minefield: Bolstering Data Protection in an Era of Relentless Hacking///The Dual Fronts of Digital Defense: Combating Hacking and Fortifying Data Protection///Hacking's New Frontier: Fortifying Data Protection in the Age of Advanced Cyber Threats///The Dual Front: Navigating Hacking Threats and Fortifying Data Protection in the Digital Age///Navigating the Digital Gauntlet: The Evolving Nexus of Hacking and Data Protection///
Subscribe
Cyber Security
Independent · Digital
Thehackingpost
RSSSubscribe
CybersecurityAI-assisted

WatchGuard Zero-Day Actively Exploited to Seize Control of Firewalls

WatchGuard has issued an alert about a critical zero-day vulnerability in its Firebox firewall appliances, identified as CVE-2025-14733. This flaw enables remote attackers to control affected devices without authentication.

NBy Natalie RhodesDec 19, 20251 min read

WatchGuard has issued an alert about a critical zero-day vulnerability in its Firebox firewall appliances, identified as CVE-2025-14733. This flaw enables remote attackers to control affected devices without authentication.

The vulnerability is an Out-of-Bounds Write issue within the iked process, which manages IKEv2 VPN negotiations. It affects Firebox appliances configured for:

Mobile user VPNs using IKEv2. Branch office VPNs using IKEv2 with a dynamic gateway peer.

This vulnerability allows attackers to send crafted requests to the firewall, causing a memory corruption error. Successful exploitation can result in arbitrary code execution, enabling attackers to execute malicious commands, install malware, or gain full administrative control.

Feature Details

CVE ID CVE-2025-14733

WatchGuard has issued an alert about a critical zero-day vulnerability in its Firebox firewall appliances, identified as CVE-2025-14733.
Natalie Rhodes · Thehackingpost

Vulnerability Type Out-of-Bounds Write ( iked process)

Impact Critical (Remote Code Execution)

CVSS Score 9.3 (Critical)

WatchGuard has verified that this vulnerability is actively being exploited. Even if a vulnerable VPN configuration has been deleted, risk remains if a static branch office VPN is still configured. Administrators should inspect logs for indicators of compromise, such as iked process crashes or hangs, and specific log messages like "Invalid peer certificate chain" or "Abnormally large IKE_AUTH request CERT payload" exceeding 2000 bytes.

Advertisement

Malicious activity has been linked to the following IP addresses:

45.95.19[.]50 51.15.17[.]89 172.93.107[.]67 199.247.7[.]82

To address this issue, WatchGuard has released software updates. Administrators should upgrade to Fireware OS 2025.1.4, 12.11.6, or 12.5.15 immediately. If a device may have been compromised, it is crucial to rotate all locally stored secrets after applying the patch.

Based on reporting by GBHackers.

AI transparency. This article was produced with the assistance of artificial intelligence and published under human editorial oversight. AI systems can make mistakes. Read how we use AI (EU AI Act, Art. 50).
Related Stories
Cybersecurity

Why Fintech Banking Platforms Are Reducing Operational Costs by 40%

Paige Monroe · Mar 26, 2026
Cybersecurity

Dogecoin Price Prediction: SHIB Burns 172M Tokens as Pepeto Exchange Earns From Every Trade

Eric Wallace · Mar 26, 2026
Cybersecurity

Solana Price Prediction: SOL Holds $86 With Commodity Status as Pepeto Targets Bigger Returns

Zachary Burns · Mar 26, 2026
Cybersecurity

Open Directory Malware Campaign Uses Obfuscated VBS, PNG Loaders and RAT Payloads

Joseph Cain · Mar 26, 2026