CVE-2025-9242

Exploited in the Wild ✓ Confirmed 0-Day

Triaged: March 5, 2026 3 articles

VulnLookup ↗ NVD ↗ MITRE ↗ CISA KEV ↗

EPSS Score

Source: FIRST.org · 2026-05-24

73.48%

probability

This CVE has a 73.48% probability of being exploited in the next 30 days.

0% Top 98.8th percentile of all CVEs 100%

CVSS score unavailable

Neither CIRCL nor NVD returned a CVSS score for this CVE. View on VulnerabilityLookup ↗

Attack Intelligence

CWE-118 · Incorrect Access of Indexable Resource ('Range Error') CWE-119 · Buffer Overflow CWE-664 · Improper Control of a Resource Through its Lifetime CWE-787 · Out-of-bounds Write

Exploits & PoC

watchtowrlabs/watchTowr-vs-WatchGuard-CVE-2025-9242

PoC CVE-2025-9242 — watchtowrlabs/watchTowr-vs-WatchGuard-CVE-2025-9242

1 repo — triés par ⭐ Rechercher sur GitHub ↗

WatchGuard Warns of Active Exploitation of Critical Fireware OS VPN Vulnerability

TheHackerNews Dec 19, 2025

CISA Flags Critical WatchGuard Fireware Flaw Exposing 54,000 Fireboxes to No-Login Attacks

TheHackerNews Nov 13, 2025

Researchers Uncover WatchGuard VPN Bug That Could Let Attackers Take Over Devices

TheHackerNews

Signal Intelligence

Confidenceⓘ

85%

EPSS 73.48%

Mentions 3

Last Seen Dec 19, 2025

CNA Information

Analyst Note

CVE-2025-9242 is a 2025 critical vulnerability in WatchGuard Fireware OS with documented active exploitation in real-world attacks. CISA added it to the KEV catalog based on evidence of active exploitation, and articles explicitly reference active real-world exploitation occurring alongside vendor patch release, meeting zero-day criteria.