Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: WatchGuard Fireware OS 12.11.8, 2026.1.2 Clear all filters
TI-2026-02887 CVE-2026-3344 · GHSA-648w-89vf-3pfc

WatchGuard Firebox System Integrity Check Bypass

Priority LOW 30

A vulnerability in WatchGuard Fireware OS may allow an attacker to bypass the Fireware OS filesystem integrity check and maintain limited persistence via a maliciously-crafted firmware update package.

CVSS 4.0MEDIUM 6.9 Network High privileges No interaction EPSS 0.00316 Published 2026-03-03 Fixed in 2026.1.2, 12.11.8 +1 CWE-440
TI-2026-02886 CVE-2026-3343 · GHSA-4484-mhwr-fxpc

WatchGuard Firebox Reflected Cross-Site-Scripting (XSS) Vulnerability in Fireware Web UI

Priority LOW 23

A reflected cross-site scripting (XSS) vulnerability in the Fireware OS Web UI enabled execution of malicious JavaScript in the context of an authenticated management user's browser when they click on a specially crafted…

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.00242 Published 2026-03-03 Fixed in 2026.1.2, 12.11.8 CWE-79