Actively exploited vulnerabilities affecting WatchGuard products.https://wildfortech.comhttps://wildfortech.com/security#CVE-2025-14733https://wildfortech.com/security#CVE-2025-14733This flaw in WatchGuard's Fireware OS allows a remote attacker with no credentials to write data outside intended memory boundaries in the iked process, potentially executing arbitrary code on the device. Because it targets the IKEv2 VPN handler, both mobile user VPN and branch office VPN configurations using IKEv2 with a dynamic gateway peer are exposed at the network perimeter — exactly where attackers look for initial footholds into an organization.Fri, 19 Dec 2025 00:00:00 GMTWatchGuardFireboxhttps://wildfortech.com/security#CVE-2025-9242https://wildfortech.com/security#CVE-2025-9242WatchGuard Firebox devices contain a flaw in the OS iked process — the component handling IKE (Internet Key Exchange) for VPN tunnels — that allows a remote, unauthenticated attacker to write data outside intended memory boundaries and potentially execute arbitrary code. Because no authentication is required, this is exposed to anyone who can reach the affected service, making it a high-priority risk for network perimeters relying on WatchGuard Firebox for security.Wed, 12 Nov 2025 00:00:00 GMTWatchGuardFirebox