CVE-2026-3344 - WatchGuard Firebox System Integrity Check Bypass

Back Back to CVE browser

MEDIUM

WatchGuard Firebox System Integrity Check Bypass

Published Mar 3, 2026

6.9

MEDIUM

CVSS 4.0

EPSS 0.45%

Description

A vulnerability in WatchGuard Fireware OS may allow an attacker to bypass the Fireware OS filesystem integrity check and maintain limited persistence via a maliciously-crafted firmware update package.

Affected products

Vendor WatchGuard Product Fireware OS Default
unaffected
- Version
  12.0
  Status
  affected
  Constraints
  <12.11.8
- Version
  12.0
  Status
  affected
  Constraints
  <12.5.17
- Version
  2025.1
  Status
  affected
  Constraints
  <2026.1.2

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

WatchGuard

Fireware OS

unaffected

Version	Status	Constraints
12.0	affected	<12.11.8
12.0	affected	<12.5.17
2025.1	affected	<2026.1.2

Remediation

Vendor solution

Fireware OS 2026.1.2, Fireware OS 12.11.8, Fireware OS 12.5.17

Weaknesses (1)

CWE-440

References (3)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-9290
Advisory
https://psirt.watchguard.com/CVE-2026-3344
vendor-advisory
https://www.watchguard.com/wgrd-psirt/advisory/wgsa-2026-00005
vendor-advisoryVendor Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-9290		Advisory
https://psirt.watchguard.com/CVE-2026-3344		vendor-advisory
https://www.watchguard.com/wgrd-psirt/advisory/wgsa-2026-00005		vendor-advisoryVendor Advisory