Back to Database
Status published
High
CVE-2025-4106
WatchGuard Firebox leftover debug code vulnerability
Vulnerability Description
An authenticated admin user with access to both the management WebUI and command line interface on a Firebox can enable a diagnostic debug shell by uploading a platform and version-specific diagnostic package and executing a leftover diagnostic command. This issue affects Fireware OS: from 12.0 before 12.11.2.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-4106
Credits & Attribution
No credits recorded in the NVD database.
More from WatchGuard
View All →CVE-2025-9242
WatchGuard Firebox iked Out of Bounds Write Vulnerability
Critical
9.3
CVE-2025-6999
WatchGuard Firebox Authentication Portal Request Smuggling Vulnerability
Medium
6.9
CVE-2025-6947
WatchGuard Firebox Stored Cross-Site-Scripting (XSS) Vulnerability in SIP Proxy Configuration
Medium
4.8
CVE-2025-6946
WatchGuard Firebox Stored Cross-Site-Scripting (XSS) Vulnerability in IPS Configuration
Medium
4.8
CVE-2025-4805
WatchGuard Firebox Stored Cross-Site-Scripting (XSS) Vulnerability in Acces Portal Configuration
Medium
4.8
Affected Vendor
WatchGuard
View all reports →Affected Software
Fireware OS
Vulnerable Versions:
12.0
Timeline
Official Publish:
October 24th, 2025
Last Modified:
February 26th, 2026
Added to House:
July 22nd, 2026
CVSS Vectors
Weaknesses (CWE)
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.