WatchGuard has issued patches for a critical vulnerability (CVE-2025-14733) in Firebox firewalls, which is actively exploited in the wild. The flaw allows remote attackers to execute arbitrary code, impacting Fireware OS versions 11.x, 12.x, and 2025.x, with significant implications for organizations using VPN configurations. #WatchGuard #FireboxVulnerability
Keypoints
- WatchGuard has released patches for a critical zero-day vulnerability in Firebox firewalls.
- The vulnerability (CVE-2025-14733) affects the iked process in Fireware OS and is being exploited in the wild.
- Successful exploitation can allow remote code execution on affected devices.
- About 125,000 IP addresses globally, including 40,000 in the US, are linked to impacted firewalls.
- Organizations are urged to apply updates promptly, with federal agencies required to address the issue within a week.
Read More: https://www.securityweek.com/watchguard-patches-firebox-zero-day-exploited-in-the-wild/