Home

Description

A vulnerability in WatchGuard Fireware OS may allow an attacker to bypass the Fireware OS filesystem integrity check and maintain limited persistence via a maliciously-crafted firmware update package.This issue affects Fireware OS 12.0 up to and including 12.11.7, 12.5.9 up to and including 12.5.16, and 2025.1 up to and including 2026.1.1.

PUBLISHED Reserved 2026-02-27 | Published 2026-03-03 | Updated 2026-03-03 | Assigner WatchGuard




MEDIUM: 6.9CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N

Problem types

CWE-440: Expected Behavior Violation

Product status

Default status
unaffected

12.0 (semver)
affected

12.5.9 (semver)
affected

2025.1 (semver)
affected

References

www.watchguard.com/wgrd-psirt/advisory/wgsa-2026-0005

cve.org (CVE-2026-3344)

nvd.nist.gov (CVE-2026-3344)

Download JSON