CVE-2025-4106CWE-489

CVE-2025-4106

published October 25, 2025

CVSS
8.9
EPSS
0%
Percentile
24.1
In the wild
Unconfirmed
What it is

An authenticated admin user with access to both the management WebUI and command line interface on a Firebox can enable a diagnostic debug shell by uploading a platform and version-specific diagnostic package and executing a leftover diagnostic command.

The record
Technical detail
CVSS
8.9 · NONE
CVSS v4.0
Not supplied
EPSS
0.00323 · 24.1th percentile
Weakness
CWE-489 · Active Debug Code
Published
2025-10-25T02:15Z
References (2)
EPSS history
Timeline
  • 24 OCT 21:32Z
    WatchGuard Firebox leftover debug code vulnerability
    cvelistv5