CVE-2025-12026

🗓️ 04 Dec 2025 21:43:46Reported by WatchGuardType

Out-of-bounds certd write enables code execution via CLI on WatchGuard Fireware.

Reporter	Title	Published	Views	Family All 13
attackerkb	CVE-2025-12026	4 Dec 202521:43	–	attackerkb
BDU FSTEC	The vulnerability of the Command Line Interface (CLI) of the WatchGuard Fireware operating system, which allows a hacker to execute arbitrary code	9 Dec 202500:00	–	bdu_fstec
Circl	CVE-2025-12026	4 Dec 202522:08	–	circl
CNNVD	WatchGuard Fireware OS 安全漏洞	4 Dec 202500:00	–	cnnvd
Cvelist	CVE-2025-12026 WatchGuard Firebox Authenticated Out of Bounds Write in certd	4 Dec 202521:43	–	cvelist
EUVD	EUVD-2025-201307	5 Dec 202500:31	–	euvd
NVD	CVE-2025-12026	4 Dec 202522:15	–	nvd
OSV	CVE-2025-12026	4 Dec 202522:15	–	osv
Positive Technologies	PT-2025-49154	4 Dec 202500:00	–	ptsecurity
Rapid7 Vulnerability Database (full)	CVE-2025-12026: Out-of-bounds Write	4 Dec 202500:00	–	rapid7

NVD

CNA

Node

AND

watchguard firewareRange2025.1–2025.1.3

watchguard firebox_t115-wMatch-

watchguard firebox_t125Match-

watchguard firebox_t125-wMatch-

watchguard firebox_t145Match-

watchguard firebox_t145-wMatch-

watchguard firebox_t185Match-

Node

AND

watchguard firewareRange12.0.0–12.11.5

watchguard firebox_m270Match-

watchguard firebox_m290Match-

watchguard firebox_m370Match-

watchguard firebox_m390Match-

watchguard firebox_m440Match-

watchguard firebox_m4600Match-

watchguard firebox_m470Match-

watchguard firebox_m4800Match-

watchguard firebox_m5600Match-

watchguard firebox_m570Match-

watchguard firebox_m5800Match-

watchguard firebox_m590Match-

watchguard firebox_m670Match-

watchguard firebox_m690Match-

watchguard firebox_nv5Match-

watchguard firebox_t20Match-

watchguard firebox_t25Match-

watchguard firebox_t40Match-

watchguard firebox_t45Match-

watchguard firebox_t55Match-

watchguard firebox_t70Match-

watchguard firebox_t80Match-

watchguard firebox_t85Match-

watchguard fireboxcloudMatch-

watchguard fireboxvMatch-

Node

AND

watchguard firewareRange12.5–12.5.14

watchguard firebox_t15Match-

watchguard firebox_t35Match-

[
  {
    "vendor": "WatchGuard",
    "product": "Fireware OS",
    "versions": [
      {
        "status": "affected",
        "version": "2025.1",
        "versionType": "custom",
        "lessThan": "2025.1.3"
      },
      {
        "status": "affected",
        "version": "12.0",
        "versionType": "custom",
        "lessThanOrEqual": "12.11.5"
      }
    ],
    "defaultStatus": "unaffected",
    "platforms": [
      "Default"
    ]
  },
  {
    "vendor": "WatchGuard",
    "product": "Fireware OS",
    "versions": [
      {
        "status": "affected",
        "version": "12.0",
        "versionType": "custom",
        "lessThan": "12.5.14"
      }
    ],
    "defaultStatus": "unaffected",
    "platforms": [
      "T15/T35"
    ]
  }
]

Source	Link
psirt	www.psirt.watchguard.com/CVE-2025-12026
watchguard	www.watchguard.com/wgrd-psirt/advisory/wgsa-2025-00017

10 Aug 2026 16:19Current

8High risk

Vulners AI Score8

CVSS 3.17.2

CVSS 48.6

EPSS0.00441

SSVC

CWE-787