CVE-2026-3342

8.6 highEPSS 6.4%

High (8.6) in watchguard fireware. EPSS 6.4% chance of exploitation in the next 30 days.

An Out-of-bounds Write vulnerability in WatchGuard Fireware OS may allow an authenticated privileged administrator to execute arbitrary code with root permissions via an exposed management interface. This vulnerability affects Fireware OS 11.9 up to and including 11.12.4_Update1, 12.0 up to and including 12.11.7 and 2025.1 up to and including 2026.1.1.

Severity

CVSS 4.0

8.6 high

CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

CVSS 3.1

7.2 high

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

EPSS: 6.4% chance of exploitation in the next 30 days; higher than 93% of CVEs (scores of 2026-10-31)
CWE: CWE-787
Published: 2026-03-03
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

watchguard:fireware

References

https://www.watchguard.com/wgrd-psirt/advisory/wgsa-2026-00003

Check your stack JSON