CVE-2025-9242
Out-of-Bounds Write in WatchGuard Firebox. CISA confirmed attackers exploit it and added it to its Known Exploited Vulnerabilities catalog on 12 November 2025.
- Product
- WatchGuard Firebox
- Added to CISA's catalog
- Federal fix-by date
- Ransomware
- No known use in ransomware campaigns
- Vendor advisories
- Sources
- CISA’s catalog, NVD entry
CISA’s description.
WatchGuard Firebox contains an out-of-bounds write vulnerability in the OS iked process that may allow a remote unauthenticated attacker to execute arbitrary code.
More from WatchGuard this year.
- CVE-2025-14733 Out of Bounds Write, added
Every flaw CISA confirmed exploited in the last 30 days is on the exploit watch. This is not security advice. Check the vendor’s advisory before acting. From CISA’s catalog of 30 October 2026.