WatchGuard published a new security vulnerability on December 18, 2025, which you absolutely must be aware of:
WatchGuard Firebox iked Out of Bounds Write Vulnerability (CVE-2025-14773)(WGSA-2025-00027) CVSS 9.3
Fortinet CVE-2024-55591 – Authentication bypass in Node.js websocket module
On January 15, Fortinet published a new PSIRT information regarding a newly discovered authentication bypass on FortiGate and FortiProxy when the administrative interface is publicly accessible. Update January 16: FortiOS 7.0.17 which contains a bug fix, has been released. Update January 17: Release notes have been published for FortiOS 7.0.17….
