Search Articles

Search Results: WatchGuard

CISA Flags Actively Exploited WatchGuard Firewall Zero-Day: What Builders and Defenders Must Do Now

CISA Flags Actively Exploited WatchGuard Firewall Zero-Day: What Builders and Defenders Must Do Now

A critical WatchGuard Firebox vulnerability (CVE-2025-9242) is under active exploitation, prompting CISA to impose a rapid patch deadline on U.S. federal agencies. With tens of thousands of exposed devices still online and firewalls now prime initial-access real estate, this bug is a test of whether enterprises have truly learned anything from the last decade of perimeter failures.
Critical RCE Flaw in WatchGuard Firewalls Puts Enterprise Networks at Risk

Critical RCE Flaw in WatchGuard Firewalls Puts Enterprise Networks at Risk

WatchGuard has patched a severe remote code execution vulnerability (CVE-2025-9242) affecting Firebox firewalls using IKEv2 VPN configurations. Exploitation could let attackers hijack network appliances—even if vulnerable settings were previously deleted. The disclosure follows a pattern of firewall-targeting attacks by ransomware groups.