WatchGuard Warns of Active Exploitation of Critical Fireware OS VPN Vulnerability

WatchGuard has released fixes for a critical security vulnerability CVE-2025-14733 (CVSS 9.3) in Fireware OS that is being actively exploited in real-world attacks. The vulnerability is an out-of-bounds write affecting the iked process that allows remote unauthenticated attackers to execute arbitrary code. This represents a significant threat to organizations using affected WatchGuard firewall products with VPN functionality.