CVE-2026-3344

· MEDIUMAnalyzed

← All CVEs

CVSS v3.1

4.9

CVSS v4.0

6.9

EPSS

0.26%

Published

Mar 3, 2026

Modified

Mar 4, 2026

Public PoC / Exploit

All weaponized →

No public PoC or exploit code indexed for this CVE.

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

A vulnerability in WatchGuard Fireware OS may allow an attacker to bypass the Fireware OS filesystem integrity check and maintain limited persistence via a maliciously-crafted firmware update package.This issue affects Fireware OS 12.0 up to and including 12.11.7, 12.5.9 up to and including 12.5.16, and 2025.1 up to and including 2026.1.1.

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N

Weaknesses (CWE)

CWE-440

Affected Products (41)

watchguard · fireware (up to 12.11.8)vulnerable

watchguard · firebox_m270

watchguard · firebox_m290

watchguard · firebox_m370

watchguard · firebox_m390

watchguard · firebox_m440

watchguard · firebox_m4600

watchguard · firebox_m470

watchguard · firebox_m4800

References (1)

https://www.watchguard.com/wgrd-psirt/advisory/wgsa-2026-00005

Vendor Advisory

KEV Catalog EPSS Scores Vendors All CVEs