XTMv-Large
Announced in: WatchGuard XTMv Small, Medium, Large, Datacenter
Virtual Appliance
· Firebox Series
Is the WatchGuard XTMv Small, Medium, Large, Datacenter still supported?
No. WatchGuard ended support for the WatchGuard XTMv Small, Medium, Large, Datacenter on 2023-12-31. No further security fixes will be issued. See WatchGuard's lifecycle bulletin.
When does the WatchGuard XTMv Small, Medium, Large, Datacenter reach end of support?
WatchGuard support for the WatchGuard XTMv Small, Medium, Large, Datacenter ends on 2023-12-31.
What replaces the WatchGuard XTMv Small, Medium, Large, Datacenter?
WatchGuard has not published a successor model for the WatchGuard XTMv Small, Medium, Large, Datacenter.
What known-exploited CVEs apply to the XTMv-Large past end of support?
4 CVEs in CISA's Known Exploited Vulnerabilities catalog apply to the platform the WatchGuard XTMv Small, Medium, Large, Datacenter runs. These will not be patched on this device because it is past the WatchGuard security-support date. See the Known Exploited Vulnerabilities table below for the full list.
Known Exploited Vulnerabilities
This device is past WatchGuard's security-support date. 4 CVEs in CISA's Known Exploited Vulnerabilities catalog apply to the platform it runs. WatchGuard is not issuing patches for this model. Isolate, compensate, or refresh.
| CVE | KEV added | Vulnerability | Flags |
|---|---|---|---|
CVE-2025-14733
|
WatchGuard Firebox Out of Bounds Write Vulnerability | ||
CVE-2025-9242
|
WatchGuard Firebox Out-of-Bounds Write Vulnerability | ||
CVE-2022-23176
|
WatchGuard Firebox and XTM Privilege Escalation Vulnerability | ||
CVE-2022-26318
|
WatchGuard Firebox and XTM Appliances Arbitrary Code Execution |
Source: CISA Known Exploited Vulnerabilities catalog. The Ransomware flag reflects CISA's own knownRansomwareCampaignUse field, set when the CVE has been observed in ransomware campaigns per their threat intel. It's not a property of the vulnerability description itself.
Correlation is at the platform level, not per-OS-version. Not exhaustive: KEV only lists actively-exploited CVEs and many relevant unexploited vulnerabilities are not here. Verify against vendor security advisories (PSIRT, JSA, PAN-SA) and NVD before acting. See compensating controls if refresh isn't immediate.
XTMv-Large Lifecycle Overview
The WatchGuard XTMv-Large (XTMv-Large) is a virtual appliance product in the WatchGuard Firebox series. This product has reached end of life as of , meaning WatchGuard no longer provides technical support, software updates, or hardware replacement for this product. It was last available for purchase on . Organizations still running the XTMv-Large should plan a migration .
Lifecycle Milestones
| End of sale | 7y 7mo ago | |
|---|---|---|
| Last date of support | 2y 7mo ago |