CVE-2025-14733: WatchGuard Firebox iked Out of Bounds Write Vulnerability Exploited in the Wild

On December 18, 2025, WatchGuard issued fixes for CVE-2025-14733 — a critical out-of-bounds write in the iked process of Fireware OS enabling remote unauthenticated code execution, with confirmed in-the-wild exploitation. Affected configurations include IKEv2 mobile and branch office VPNs (including some static-peer cases); Arctic Wolf recommends immediate upgrade to the listed fixed Fireware OS versions, rotation of locally stored secrets, and applying WatchGuard's temporary secure-access guidance if patching cannot be done immediately.