CVE-2025-9242

WatchGuard patches critical remote-code vulnerability in Firebox firewalls (CVE-2025-9242)

News, Risk, Vendors, Vulnerabilities

September 18, 2025

WatchGuard issued patches for a critical remote-code execution flaw in Firebox firewalls (CVE-2025-9242) caused by an out-of-bounds write in the Fireware OS iked process, affecting several Fireware versions; admins are urged to patch or apply temporary mitigations.