CVE-2026-4315 WatchGuard Firebox Cross-Site Request Forgery (CSRF) in Fireware Web UI

A Cross-Site Request Forgery CSRF vulnerability in the WatchGuard Fireware OS WebUI could allow a remote attacker to trigger a denial-of-service DoS condition in the Fireware Web UI by convincing an authenticated administrator into visiting a malicious web page...

CVE-2026-4266 WatchGuard Firebox Insecure Deserialization in Fireware Access Portal

An Insecure Deserialization vulnerability in WatchGuard Fireware OS allows an attacker that has obtained write access to the local filesystem through another vulnerability to execute arbitrary code in the context of the portald user. Note, this vulnerability does not affect Firebox platforms that...

WatchGuard Fireware OS 安全漏洞

WatchGuard Fireware OS is a software operated by the American company WatchGuard, running on Firebox devices. Versions 12.1 to 12.11.8 and 2025.1 to 2026.1.2 of WatchGuard Fireware OS contain security vulnerabilities due to insecure deserialization, which may allow arbitrary code to be executed i...

PT-2026-29022

Name of the Vulnerable Software and Affected Versions WatchGuard Fireware OS versions 12.1 through 12.11.8 WatchGuard Fireware OS versions 2025.1 through 2026.1.2 Description An Insecure Deserialization issue exists in WatchGuard Fireware OS. An attacker gaining write access to the local filesyst...

WatchGuard Fireware OS 安全漏洞

WatchGuard Fireware OS is a software operated by the American company WatchGuard, running on Firebox devices. Vulnerabilities exist in versions 11.8 to 11.12.4+541730, 12.0 to 12.11.8, and 2025.1 to 2026.1.2 of WatchGuard Fireware OS. The vulnerability stems from cross-site request forgery in the...

CVE-2026-4266

creationtimestamp| type| source ---|---|--- 2026-03-27 13:39:45+00:00| seen| https://cyber.gc.ca/en/alerts-advisories/watchguard-security-advisory-av26-289 2026-03-27 16:01:47+00:00| seen| https://bsky.app/profile/pigondrugs.bsky.social/post/3mi2ij54vyq2f 2026-03-30 15:22:38+00:00| seen|...

📄 WatchGuard Firebox Default SSH Credentials

This is a python script to detect whether or not WatchGuard Firebox devices allow unauthorized access via default credentials admin:readwrite on port 4118. =============================================================================================================================================...

📄 WatchGuard IKEv2 Detection Scanner

This Metasploit module checks for potential vulnerability to CVE-2022-23176 in WatchGuard Firmware IKEv2 service by analyzing malformed IKESAINIT responses. ============================================================================================================================================...

CVE-2026-3342

An Out-of-bounds Write vulnerability in WatchGuard Fireware OS may allow an authenticated privileged administrator to execute arbitrary code with root permissions via an exposed management interface. This vulnerability affects Fireware OS 11.9 up to and including 11.12.4Update1, 12.0 up to and...

CVE-2026-3344

A vulnerability in WatchGuard Fireware OS may allow an attacker to bypass the Fireware OS filesystem integrity check and maintain limited persistence via a maliciously-crafted firmware update package.This issue affects Fireware OS 12.0 up to and including 12.11.7, 12.5.9 up to and including...

CVE-2026-3344

A vulnerability in WatchGuard Fireware OS may allow an attacker to bypass the Fireware OS filesystem integrity check and maintain limited persistence via a maliciously-crafted firmware update package...

CVE-2026-3342

An Out-of-bounds Write vulnerability in WatchGuard Fireware OS may allow an authenticated privileged administrator to execute arbitrary code with root permissions via an exposed management interface. This vulnerability affects Fireware OS 11.9 up to and including 11.12.4Update1, 12.0 up to and...

CVE-2026-3342

An Out-of-bounds Write vulnerability in WatchGuard Fireware OS may allow an authenticated privileged administrator to execute arbitrary code with root permissions via an exposed management interface. This vulnerability affects Fireware OS 11.9 up to and including 11.12.4Update1, 12.0 up to and...

CVE-2026-3342

creationtimestamp| type| source ---|---|--- 2026-03-03 13:49:00+00:00| seen| https://cyber.gc.ca/en/alerts-advisories/watchguard-security-advisory-av26-189 2026-03-03 16:00:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mg65ai2jgz2n...

CVE-2026-3344

creationtimestamp| type| source ---|---|--- 2026-03-03 13:49:00+00:00| seen| https://cyber.gc.ca/en/alerts-advisories/watchguard-security-advisory-av26-189 2026-03-03 16:29:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mg66v2uvd42o...

CVE-2026-3343

creationtimestamp| type| source ---|---|--- 2026-03-03 13:49:00+00:00| seen| https://cyber.gc.ca/en/alerts-advisories/watchguard-security-advisory-av26-189 2026-03-03 16:06:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mg65lt5b7l24...

CVE-2026-3344 WatchGuard Firebox System Integrity Check Bypass

A vulnerability in WatchGuard Fireware OS may allow an attacker to bypass the Fireware OS filesystem integrity check and maintain limited persistence via a maliciously-crafted firmware update package...

CVE-2026-3344

Watching WatchGuard Fireware OS has a vulnerability (CVE-2026-3344) that allows bypassing the filesystem integrity check and maintaining limited persistence via a maliciously-crafted firmware update package. Affected versions are: Fireware OS 12.0–12.11.7, 12.5.9–12.5.16, and 2025.1–2026.1.1. The...

CVE-2026-3344 WatchGuard Firebox System Integrity Check Bypass

A vulnerability in WatchGuard Fireware OS may allow an attacker to bypass the Fireware OS filesystem integrity check and maintain limited persistence via a maliciously-crafted firmware update package...

EUVD-2026-9290

A vulnerability in WatchGuard Fireware OS may allow an attacker to bypass the Fireware OS filesystem integrity check and maintain limited persistence via a maliciously-crafted firmware update package.This issue affects Fireware OS 12.0 up to and including 12.11.7, 12.5.9 up to and including...