CVE-2022-26318

Unauthenticated remote code execution vulnerability in WatchGuard Firebox and XTM appliances.

An unauthenticated user can execute arbitrary code on WatchGuard Firebox and XTM appliances, enabling attackers to compromise network security. DIB organizations must ensure these appliances are patched immediately to prevent remote code execution and potential data breaches. This failure highlights the critical need for timely patch management of network security hardware.

Shame score — An unauthenticated remote code execution vulnerability in a widely deployed network security appliance is a severe, avoidable failure that directly compromises organizational security.