Skip to content
OpenAdvisories
Medium WID-SEC-2026-0570 3 CVEs

WatchGuard Firebox: Mehrere Schwachstellen

Published Mar 2, 2026 · Updated Mar 3, 2026 · Revision 2 · de-DE

Vendor: WatchGuard Product: Firebox

Summary

Ein Angreifer kann mehrere Schwachstellen in WatchGuard Firebox ausnutzen, um beliebigen Programmcode mit Administratorrechten auszuführen, um Sicherheitsvorkehrungen zu umgehen, und um einen Cross-Site Scripting Angriff durchzuführen.

Product

WatchGuard Firebox ist ein Firewall bzw. Unified Threat Management Produkt.

Vulnerabilities 3

  • High 8.6
    CVE-2026-3342

    WatchGuard Firebox Out of Bounds Write Vulnerability

    An Out-of-bounds Write vulnerability in WatchGuard Fireware OS may allow an authenticated privileged administrator to execute arbitrary code with root permissions via an exposed management interface. This vulnerability affects Fireware OS 11.9 up to and inclu…

    WatchGuard Fireware OS
  • Medium 6.9
    CVE-2026-3344

    WatchGuard Firebox System Integrity Check Bypass

    A vulnerability in WatchGuard Fireware OS may allow an attacker to bypass the Fireware OS filesystem integrity check and maintain limited persistence via a maliciously-crafted firmware update package.

    WatchGuard Fireware OS
  • Medium 5.1
    CVE-2026-3343

    WatchGuard Firebox Reflected Cross-Site-Scripting (XSS) Vulnerability in Fireware Web UI

    A reflected cross-site scripting (XSS) vulnerability in the Fireware OS Web UI enabled execution of malicious JavaScript in the context of an authenticated management user's browser when they click on a specially crafted link.

    WatchGuard Fireware OS

Revision history

  1. #2

    Referenz(en) aufgenommen: EUVD-2026-9288, EUVD-2026-9290, EUVD-2026-9289

  2. #1

    Initiale Fassung

References