Dec 19, 2025

Started

• Closed✓Patched

  WatchGuard Firebox: Firebox Out of Bounds Write Vulnerability

  WatchGuard Fireware OS iked process contains an out of bounds write vulnerability in the OS iked process. This vulnerability may allow a remote unauthenticated attacker to execute arbitrary code and affects both the mobile user VPN with IKEv2 and the branch office VPN using IKEv2 when configured with a dynamic gateway peer. Added to CISA KEV on 2025-12-19.

  WatchGuard Firebox·Closed Dec 19, 2025·updated Dec 19, 2025

• Closed✓Patched

  MongoBleed: pre-auth heap memory leak in MongoDB Server

  A bug in MongoDB's zlib message decompression let an unauthenticated client read uninitialized heap memory, which can contain credentials, tokens and other data. Public PoCs appeared and CISA confirmed exploitation. Upgrade, or remove zlib from the network compressors and keep MongoDB off the internet.

  MongoDB Server·Closed Dec 29, 2025·updated Dec 29, 2025