WatchGuard Fireware OS contains an out of bounds write vulnerability in the iked process (CVE-2025-14733). The vulnerability allows remote unauthenticated attackers to execute arbitrary code on affected systems. It impacts both mobile user VPN with IKEv2 and branch office VPN using IKEv2 when configured with dynamic gateway peer. Organizations are advised to check for signs of compromise on all internet-accessible instances after applying mitigations. This is a critical vulnerability requiring immediate attention due to the remote code execution capability without authentication.