
- CVE-2025-9242 allows unauthenticated remote code execution on WatchGuard Fireware devices
- Vulnerability affects VPN configurations using IKEv2 with dynamic gateway peers
- Businesses should patch affected versions and restrict internet access to essential devices only
WatchGuard Fireware, the operating system powering much of WatchGuard’s software, carried a critical severity vulnerability that allowed threat actors to execute arbitrary code remotely and essentially take over compromised devices, the company has warned.