WatchGuard fixes 18 Fireware OS vulnerabilities on the Firebox firewall, including critical CVE-2026-103594 (CVSS 9.5). Upgrade to 2026.4 now.
firewall
WatchGuard patches two flaws: a VPN privilege escalation (NCPVE-2025-0626) and Fireware LDAP injection (CVE-2026-1498). Update Firebox and VPN clients now.
Critical Foomuuri flaws (CVE-2025-67603) allow local users to hijack firewall settings. SUSE urges immediate update to v0.31 to secure your system.
SonicWall reports a pre-auth stack-based buffer overflow flaw (CVE-2025-40601) in SonicOS SSLVPN, allowing remote DoS attacks. Patches and mitigation are available.
Palo Alto patched a DoS flaw (CVE-2025-4619) in PAN-OS. An unauthenticated attacker can remotely reboot the firewall if URL proxy or decryption policies are enabled.
Sangoma has issued an urgent security advisory for a FreePBX exploit. Admins with publicly exposed control panels are urged to lock down access immediately.
A critical vulnerability (CVE-2025-20265) in Cisco Secure Firewall Management Center allows unauthenticated attackers to execute commands with high privilege.
SonicWall discloses CVE-2025-40600, a critical format string vulnerability in SonicOS SSL VPN, allowing unauthenticated remote DoS attacks on Gen7 firewalls. Update to 7.3.0-7012 or later.
Microsoft admitted it prematurely marked a Windows 11 firewall configuration error (Event ID 2042) as "Resolved." The issue persists, and a fix is still weeks away.
Microsoft's latest Windows 11 24H2 preview (KB5060829) causes ignorable firewall errors in Event Viewer due to an unfinished feature. It also brings PC migration and taskbar improvements.
Zyxel firewalls are under a coordinated attack exploiting critical RCE flaw CVE-2023-28771 (CVSS 9.8) via UDP port 500, likely by Mirai botnets. Patch immediately
Critical SonicWall flaw (CVE-2025-32818) in SSLVPN can crash firewalls, leading to DoS. Update your Gen7 devices now!
Zyxel releases patches for USG FLEX H firewalls to address critical vulnerabilities. Learn about the security flaws and how to protect your network.