CVE-2022-31790: WatchGuard Fireware

High severity, CVSS 7.5. EPSS: 2% chance of exploitation in the next 30 days.

WatchGuard Firebox and XTM appliances allow an unauthenticated remote attacker to retrieve sensitive authentication server settings by sending a malicious request to exposed authentication endpoints. This is fixed in Fireware OS 12.8.1, 12.5.10, and 12.1.4.

Affected products

• WatchGuard Fireware: from 12.0.0, before 12.1.4 (fixed in 12.1.4); from 12.2.0, before 12.5.10 (fixed in 12.5.10); version 12.6.1 only; version 12.6.3 only; version 12.6.4 only; version 12.7.0 only; …

Published 2022-09-06. Last modified 2026-06-17.