CISA: WatchGuard RCE flaw now exploited in ransomware attacks
Read original article ↗AI Summary
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has confirmed that ransomware gangs are actively exploiting a critical remote code execution vulnerability, CVE-2025-14733, in WatchGuard Firebox firewalls. The flaw allows unauthenticated attackers to execute arbitrary code remotely due to an out-of-bounds write issue, particularly affecting systems with IKEv2 VPN configurations. Despite patches being available since December 2025, nearly 9,000 vulnerable devices remain exposed online, posing ongoing risks to organizations. CISA added the vulnerability to its Known Exploited Vulnerabilities catalog and mandated federal agencies to patch it within one week.
AI-extracted · verify before operational use
No entities or IoCs were extracted from this article.